Hi Matthew,
yea, i know and agree....been doing this (and only this) for like 7
years now, so I'm no know it all, but there isn't too much I haven't
seen, done or fixed, etc... I was running an ISP on NT when they said it
couldn't be done (3.5 no less)
I can't tell you i'm happy with microsoft, cause I'm not. For all of
MS's resources you would think it would be bullet proof...IIS that is...
I just know
that having the servers patched *did not* help this time around. Was
also running NAV, but the version was not recent enough to stop this in
any way, regardless of the def files.
Spent the next 2 days dealing with the sucker. That's the reason I call it
testicle support...cause if I don't figure it out...most of the time it
doesn't get fixed...
I know of FREEBSD and Apache setups getting hacked too, so the reality
of life on the Internet is shit happens... ya just deal and go on.
NAV is now catching the virus, as the server continued to be attached
for at least 24 hours after everything was re-patched and NAV was
properly updates....worst virus i've dealt with to date...
thanks.
Thanks, andyb
[EMAIL PROTECTED]
Wednesday, September 26, 2001, 12:36:50 PM, you wrote:
ML> When you make any change to your server you must re patch. I am not saying you
did make any changes but any change even the slightest one can alter the patches and
then you need to reinstall them
ML> ---------- Original Message ----------------------------------
ML> From: "andyb@thumpernet" <[EMAIL PROTECTED]>
ML> Reply-To: [EMAIL PROTECTED]
ML> Date: Wed, 26 Sep 2001 10:17:27 -0400
>>My web server *was* patched and it got the virus *anyway*. Same thing
>>for another web server admin near here.
>>
>>Thanks, andyb
>>[EMAIL PROTECTED]
>>
>>Tuesday, September 25, 2001, 4:45:43 PM, you wrote:
>>
>>JT> Even better, cheaper, faster. Keep up to date with patches and Service
>>JT> Packs. Like I said earlier, the patch that would keep Nimba at bay was
>>JT> posted on Microsoft's website in October of 2000.
>>
>>JT> John Tolmachoff, Network Engineer
>>
>>JT> 211 E. Imperial Hwy., Suite 106
>>JT> Fullerton, CA� 92835
>>JT> 714-578-7999, ext. 104
>>JT> [EMAIL PROTECTED]
>>JT> www.reliancesoft.com
>>JT> �
>>
>>
>>JT> -----Original Message-----
>>JT> From: [EMAIL PROTECTED]
>>JT> [mailto:[EMAIL PROTECTED]] On Behalf Of Bill Beach
>>JT> Sent: Tuesday, September 25, 2001 6:20 AM
>>JT> To: [EMAIL PROTECTED]
>>JT> Subject: [IMail Forum] OT: IIS
>>
>>JT> For all of you IIS Admins out there:
>>
>>JT> "Gartner recommends that enterprises hit by both Code Red and Nimda
>>JT> immediately investigate alternatives to IIS, including moving Web
>>JT> applications to Web server software from other vendors, such as iPlanet
>>JT> and
>>JT> Apache," explains Gartner's John Pescatore.
>>
>>JT> Complete article:
>>JT> http://www.theregister.co.uk/content/4/21853.html
>>
>>JT> -Bill
>>
>>
>>JT> Please visit http://www.ipswitch.com/support/mailing-lists.html
>>JT> to be removed from this list.
>>
>>JT> An Archive of this list is available at:
>>JT> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>
>>
>>JT> Please visit http://www.ipswitch.com/support/mailing-lists.html
>>JT> to be removed from this list.
>>
>>JT> An Archive of this list is available at:
>>JT> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>
>>
>>Please visit http://www.ipswitch.com/support/mailing-lists.html
>>to be removed from this list.
>>
>>An Archive of this list is available at:
>>http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
>>
ML> ________________________________________________________________
ML> Sent via the WebMail system at lohrtech.com
ML> Please visit http://www.ipswitch.com/support/mailing-lists.html
ML> to be removed from this list.
ML> An Archive of this list is available at:
ML> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Please visit http://www.ipswitch.com/support/mailing-lists.html
to be removed from this list.
An Archive of this list is available at:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
