From owner-freebsd-security Thu Sep 20 14: 4: 4 2001 Delivered-To: freebsd-security@freebsd.org Received: from mailsrv.otenet.gr (mailsrv.otenet.gr [195.170.0.5]) by hub.freebsd.org (Postfix) with ESMTP id 0D97337B41A for ; Thu, 20 Sep 2001 14:03:56 -0700 (PDT) Received: from hades.hell.gr (patr530-a196.otenet.gr [212.205.215.196]) by mailsrv.otenet.gr (8.11.5/8.11.5) with ESMTP id f8KL3pS04256; Fri, 21 Sep 2001 00:03:51 +0300 (EEST) Received: (from charon@localhost) by hades.hell.gr (8.11.6/8.11.6) id f8KJ8xx25432; Thu, 20 Sep 2001 22:08:59 +0300 (EEST) (envelope-from charon@labs.gr) Date: Thu, 20 Sep 2001 22:08:57 +0300 From: Giorgos Keramidas To: David Kirchner Cc: Dennis Mathiasen , security@FreeBSD.ORG Subject: Re: NIMDA Virus (OT) Message-ID: <20010920220856.A25250@hades.hell.gr> References: <20010920080301.W85958-100000@localhost> Mime-Version: 1.0 Content-Type: multipart/signed; micalg=pgp-sha1; protocol="application/pgp-signature"; boundary="SUOF0GtieIMvvwua" Content-Disposition: inline In-Reply-To: <20010920080301.W85958-100000@localhost> User-Agent: Mutt/1.3.22.1i X-GPG-Fingerprint: DB89 935F 85FC B995 91CA 4AEA 9F1D F31A C6B2 F5FC X-URL: http://labs.gr/~charon/ Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org --SUOF0GtieIMvvwua Content-Type: text/plain; charset=us-ascii Content-Disposition: inline David Kirchner wrote: > That's a standard web page for an IIS server, I believe - Not actually > owned by Microsoft itself. Their servers are in the 207.46 block. I > haven't seen any hits from them this time. I saw *tons* from them during > Code Red, though. I'm sure they took the lame approach to security though, > and set up a firewall, this one to block outbound port 80 requests. So, nobody from Microsoft surfs the web? ( Just kidding, they can set up a proxy and surf through that. ) - giorgos --SUOF0GtieIMvvwua Content-Type: application/pgp-signature Content-Disposition: inline -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (FreeBSD) iD8DBQE7qj7Hnx3zGsay9fwRAv7TAJ4pVQiT9CvEjXCsE9Ev7eggdQ9CfgCfWsgA v68ZBLKAl73ajzPXBRmjUmA= =sNAA -----END PGP SIGNATURE----- --SUOF0GtieIMvvwua-- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message