From owner-freebsd-security  Mon Aug 20  0:19:49 2001
Delivered-To: freebsd-security@freebsd.org
Received: from smtp9.xs4all.nl (smtp9.xs4all.nl [194.109.127.135])
	by hub.freebsd.org (Postfix) with ESMTP id 411DC37B40F
	for <freebsd-security@FreeBSD.ORG>; Mon, 20 Aug 2001 00:19:46 -0700 (PDT)
	(envelope-from wkb@freebie.xs4all.nl)
Received: from freebie.xs4all.nl (freebie.xs4all.nl [213.84.32.253])
	by smtp9.xs4all.nl (8.9.3/8.9.3) with ESMTP id JAA23725;
	Mon, 20 Aug 2001 09:19:44 +0200 (CEST)
Received: (from wkb@localhost)
	by freebie.xs4all.nl (8.11.4/8.11.4) id f7K7JhS20090;
	Mon, 20 Aug 2001 09:19:43 +0200 (CEST)
	(envelope-from wkb)
Date: Mon, 20 Aug 2001 09:19:43 +0200
From: Wilko Bulte <wkb@freebie.xs4all.nl>
To: Alfred Perlstein <bright@mu.org>
Cc: "Carroll, D. (Danny)" <Danny.Carroll@mail.ing.nl>,
	freebsd-security@FreeBSD.ORG
Subject: Re: Code Red is from default setup
Message-ID: <20010820091943.D17285@freebie.xs4all.nl>
References: <98829DC07ECECD47893074C4D525EFC3115625@citsnl007.europe.intranet> <20010820085333.A17285@freebie.xs4all.nl> <20010820021249.A81307@elvis.mu.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.2.5i
In-Reply-To: <20010820021249.A81307@elvis.mu.org>; from bright@mu.org on Mon, Aug 20, 2001 at 02:12:49AM -0500
X-OS: FreeBSD 4.3-STABLE
X-PGP: finger wilko@freebsd.org
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-security.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-security>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-security>
X-Loop: FreeBSD.org

On Mon, Aug 20, 2001 at 02:12:49AM -0500, Alfred Perlstein wrote:
> * Wilko Bulte <wkb@freebie.xs4all.nl> [010820 01:53] wrote:
> > On Mon, Aug 20, 2001 at 08:50:57AM +0200, Carroll, D. (Danny) wrote:
> > 
> > This is *FreeBSD* security, not MickeySoft latest bugs..
> 
> Agreed.  Although it would be amusing to detect default.ida requests
> and reply with a similar request the difference being that the reply
> one reboots/shuts-down the infected box.
> 
> I'm suprised no one has suggested crafting such a tool.

I'm pretty sure that would not be legal everywhere, how tempting it might
be.

-- 
|   / o / /  _   	Arnhem, The Netherlands    	email: wilko@FreeBSD.org
|/|/ / / /( (_) Bulte	

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message