I'm hoping you will be able to provide a follow up report for this problem.
I am curious if your client has discovered they have been victimized by code
red, and that their IIS boxes have been compromised.
In terms of relevance to groupstudy, your discoveries will be relevant as
well. when troubleshooting, there are often more factors than many people
consider. it is far too easy to mistake the symptom as the cause. every
network engineer should be aware of the possibility of DDoS and the
ramifications thereof. There are a number of mailing lists that keep folks
up to date on security advisories and current issues. I like NANOG despite
the tripe that can get out of control sometimes, because when there is
something going on that effects performance of the member's ISP networks,
they are right on top of it.
currently, there is a bit of discussion about the compromise of dial up
machines by the code red virus.
Chuck
"Chris Headings" wrote in message
[EMAIL PROTECTED]">news:[EMAIL PROTECTED]...
> Will look into this....THX! The client behind this attack is a small web
> hosting company....
Message Posted at:
http://www.groupstudy.com/form/read.php?f=7&i=13205&t=13003
--------------------------------------------------
FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html
Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]