basically its a worm .. not a virus.... and on symantec site you will get the removal of it.. .or in another way.. simply block the 135 port... because its come from this port.....
and abt blocking its very simple...
acl MyDenyMIME urlpath_regex -i \.exe \.zip
acl deny MyDenyMIME
Thanks & B-regards
Furqan Abbas
From: "Vishal For You" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: [squid-users] MS Blaster help
Date: Fri, 22 Aug 2003 11:03:10 +0530
MIME-Version: 1.0
X-Originating-IP: [203.199.87.133]
X-Originating-Email: [EMAIL PROTECTED]
Received: from squid-cache.org ([206.168.0.9]) by mc9-f25.bay6.hotmail.com with Microsoft SMTPSVC(5.0.2195.5600); Thu, 21 Aug 2003 22:34:38 -0700
Received: (qmail 1580 invoked by uid 1007); 22 Aug 2003 05:33:11 -0000
Received: (qmail 1564 invoked from network); 22 Aug 2003 05:33:11 -0000
X-Message-Info: JGTYoYF78jFiFmZwv/UxzfY5lGsc9yuO
Mailing-List: contact [EMAIL PROTECTED]; run by ezmlm
Precedence: bulk
List-Post: <mailto:[EMAIL PROTECTED]>
List-Help: <mailto:[EMAIL PROTECTED]>
List-Unsubscribe: <mailto:[EMAIL PROTECTED]>
List-Subscribe: <mailto:[EMAIL PROTECTED]>
Delivered-To: mailing list [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
X-OriginalArrivalTime: 22 Aug 2003 05:33:10.0971 (UTC) FILETIME=[DFF718B0:01C3686E]
X-Spam-Status: No, hits=0.0 required=5.0tests=noneversion=2.50
X-Spam-Level: X-Spam-Checker-Version: SpamAssassin 2.50 (1.173-2003-02-20-exp)
Return-Path: [EMAIL PROTECTED]
Is there any way so that i can provide protection to my network from MSBlaster worm with the help of squid?
Is is possible to block exe's with squid ACL's?
Regards
Vishal
_________________________________________________________________
Design your own holidays. Make memories that last a lifetime. http://www.flexihols.com/2003/index.php Enjoy!
_________________________________________________________________
Help STOP SPAM with the new MSN 8 and get 2 months FREE* http://join.msn.com/?page=features/junkmail
