Hi Eric,
Code red posts individual requests (there may be more than one
depending on the originating system). In our particular case, it's once
every 2-3 minutes.
-Mark
-----Original Message-----
From: Eric Shanbrom [mailto:eshanbrom@;alpha.ipswitch.com]
Sent: Wednesday, October 23, 2002 11:56 AM
To: [EMAIL PROTECTED]
Subject: Re: [IMail Forum] IWEBMSG: 'no action has been taken'
I only have a guess as to what MS eventually did. But Code Red slams
your box several times a second--not every few minutes --effectively
creating a DoS attack. I _think_ that IIS either refuses connections
from that IP for a certain period of time or that it just refuses to
answer the request. No one here (to my knowledge, and I hope) ever
recommended to run IIS to eliminate one of these attacks. These will
look like a DoS attack and the only way to eliminate them is to get the
IP from the Web Messaging log and then block it at the router or
firewall.
Eric S
----- Original Message -----
From: "Dave Koontz" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Wednesday, October 23, 2002 12:20 PM
Subject: RE: [IMail Forum] IWEBMSG: 'no action has been taken'
> That is even more disturbing, to be forced to run IIS to fix a bug in
> iMail??? What if I don't want IIS and it's own security shortcomings
> on
the
> mail server?
>
>
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:IMail_Forum-owner@;list.ipswitch.com]On Behalf Of John
> Tolmachoff
> Sent: Wednesday, October 23, 2002 11:00 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [IMail Forum] IWEBMSG: 'no action has been taken'
>
>
> I have seen mention on this forum before of a suggestion to run IIS on
port
> 80 and set up a .asp page that does a redirect to the off port that
> you
set
> for Imail. The thought behind this is IIS is much stronger to handle
> code red attacks and such.
>
> If you search the archives, I am sure you will be able to find it, or
> someone might post more information about that redirect.
>
> John Tolmachoff
> IT Manager, Network Engineer
> RelianceSoft, Inc.
> Fullerton, CA 92835
> www.reliancesoft.com
>
>
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
>
> To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
> List Archive:
> http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
> Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
>
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive:
http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
To Unsubscribe: http://www.ipswitch.com/support/mailing-lists.html
List Archive: http://www.mail-archive.com/imail_forum%40list.ipswitch.com/
Knowledge Base/FAQ: http://www.ipswitch.com/support/IMail/
