On Tuesday 02 October 2001 22:54, Rich Cloutier wrote: > ----- Original Message ----- > From: "Thomas M. Albright" <[EMAIL PROTECTED]> > To: "GNHLUG" <[EMAIL PROTECTED]> > Sent: Tuesday, October 02, 2001 7:27 PM > Subject: Re: Website defacement (was: Anti-terrorism bill...) > > > If the web site id that important to the business, there should be a > > dedicated web-server, so if there is a break-in, it's *just* the web > > server hit, > > Wrong-o, o armchair quarterback! Any web site serving other than static > content, if it uses Microsoft, will have IIS on it. The Nimda virus spread > to ALL the servers on the network thru IIS, even though the web server was > separate. (In fact, the source of the virus was from within the private > (user) network in the first place. The servers weren't infected from > "outside." All the servers were corrupted beyond repair (two separate > anti-virus products were unable to clean the systems completely. > Uh, just a simple comment from a simple guy who couldn't spell TCP/IP a couple of weeks ago and who now is writing from behind a machine running NAT and a firewall...(and yes damnit I'm proud) I'm considering running my firewall off of a CD, so it cannot be cracked. If I'm considering this, shouldn't the pro's be ashamed that they aren't ? Hell, even MS brags that their CD duplication facilities are secure 'cuz they run Unix.
To whomever it was who said you can't be back up in 15 minutes, I have to ask, (and this is a question, not a flame) why not have a READ ONLY copy of the system somewhere that you can restore from in seconds ? Maybe hundreds of seconds but 15 minutes is a lot of seconds. ********************************************************** To unsubscribe from this list, send mail to [EMAIL PROTECTED] with the following text in the *body* (*not* the subject line) of the letter: unsubscribe gnhlug **********************************************************
