On Tue, 2003-11-04 at 12:48, Kapil Sethi wrote:
> Hey Yash,
> 
> Nothing to worry.
Hi Kapil,

The thing which is worrying me that i am getting thousands hits everyday
to my server , which i don't want.
> 
> Thousands of machines in the world get infected by Virus (oops Virii).
> and in turn start malicious requests for other web servers. This is a part
> of normal junk traffic which almost every live webserver faces.

I checked whois for these IPs they keep on changing..so simply blocking
them i don't think is going to work.

> 
> And if the server is behind a firewall, dont waste your time blocking all
> the clients connecting to the server, as they keep on changing [ p.s. I have
> alraedy spent over 5 hours per day in past, but the list went on
> increasing].

Is it possible that we block such request in iptables itself?
Right now My default Rule is ACCEPT for INPUT,OUTPUT,FORWARD.
I read some where on net that it is possible in cisco routers.
So here is great possibilty of same in linux too.


> 
> You are fortunate that you are running Apache which is not affected by these
> M$ specific bugs. If you have an M$ webserver as well make sure it is
> uptodate wil all the latest patces from M$.

I am very fortunate too for not running any M$ webserver in my
history.:) 
> 
> On the other hand if this webserver is not connected to the internet, it
> means either you have some virus infected machine on the network or you have
> got somebody in your office who is trying to be a hacker / cracker.


I sure that someone ppl here must be using some trick to avoid such
connections.

reading...

/yash
> 
> Regards
> 
> Kapil Sethi
> 
> 
> 
> _______________________________________________
> ilugd mailing list
> [EMAIL PROTECTED]
> http://frodo.hserus.net/mailman/listinfo/ilugd
> 



_______________________________________________
ilugd mailing list
[EMAIL PROTECTED]
http://frodo.hserus.net/mailman/listinfo/ilugd

Reply via email to