Re: [AOLSERVER] Code Rainbow attacks

[Jim Wilcoxson]

The 3 systems that hit me were running web servers - I checked.

@Home recently added filters to prevent public access to a web server
running on port 80.  That's really nice.  Since this virus appears to
enter via email, if it attacks the local web server first, then the
attacking host is protected by @Home's filters...

I am seeing attacks on my home system behind @Home's port 80 filters,
but only from other hosts on my cable network.

Jim

>
> I had a crazy idea: what if we returned a redirect back to their own IP
> address with the same URL?  Would they attack themselves?
>
> Or maybe this is coming from Windows PC's that aren't running a web
> server at all - just a virus client...
>
> J
>