Moreover, 99.99 % of these request come from standard WNT / W2K users who started 
their IIS service "to test what it can be" and who never stopped it. They are not 
likely to clean their computer because they don't know they are infected...

-----Original Message-----
From: Tim Funk [mailto:[EMAIL PROTECTED]]
Sent: 13 June 2002 15:04
To: Tomcat Users List
Subject: Re: Security - Attack


Warning: this may start flame war - but its my opinion.

What is the purpose of detecting and trying to prevent these attacks? If 
someone code reds (or similar) you - they get a 404 error. Why waste the 
extra processing power and  extra config maintenance on something that 
does "no harm". When the next type of attack comes out - should the 
config be changed to address that? Its a waste of time.

-Tim

Jim Urban wrote:
>>create a bunch of mod_rewrite filters (in httpd.conf - for Apache) that
> 
> redirects
> 
>>all those requests to www.microsoft.com
> 
> Can you provide an example?
> 
> Jim
> 


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

**** DISCLAIMER **** 
"This e-mail and any attachments thereto may contain information 
which is confidential and/or protected by intellectual property 
rights and are intended for the sole use of the recipient(s) named above. 
Any use of the information contained herein (including, but not limited to, 
total or partial reproduction, communication or distribution in any form) 
by persons other than the designated recipient(s) is prohibited. 
If you have received this e-mail in error, please notify the sender either 
by telephone or by e-mail and delete the material from any computer. 
Thank you for your cooperation."


--
To unsubscribe, e-mail:   <mailto:[EMAIL PROTECTED]>
For additional commands, e-mail: <mailto:[EMAIL PROTECTED]>

Reply via email to