From owner-freebsd-security Sat Sep 22 20:25:51 2001 Delivered-To: freebsd-security@freebsd.org Received: from femail37.sdc1.sfba.home.com (femail37.sdc1.sfba.home.com [24.254.60.31]) by hub.freebsd.org (Postfix) with ESMTP id 3175237B421 for ; Sat, 22 Sep 2001 20:25:43 -0700 (PDT) Received: from cl3112948a ([24.250.242.36]) by femail37.sdc1.sfba.home.com (InterMail vM.4.01.03.20 201-229-121-120-20010223) with SMTP id <20010920140744.IINB3512.femail37.sdc1.sfba.home.com@cl3112948a> for ; Thu, 20 Sep 2001 07:07:44 -0700 Message-ID: <006701c141dd$8f185940$24f2fa18@mdsn1.wi.home.com> From: "Chris Byrnes" To: Subject: New worm protection Date: Thu, 20 Sep 2001 09:07:18 -0500 Organization: JEAH Communications, LLC MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org Has anyone written an easy-to-use ipfw rule or some kind of script that will help with this new worm? I have restricted Apache to just listen to my main two web IPs instead of all of the IPs (I have hundreds of domains and each of them previously had its own IP for different reasons), and that's cut down the bandwidth use in half, but I'm still about double what my daily normal bandwidth usage is. Frustration is high, and money issues are going to surface soon. Any help would be appreciated. Chris Byrnes, Managing Member JEAH Communications, LLC To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message