If there is a firewall (SuSE hopefully) between you and the net. You could
perhaps setup a rule that would look for Nimda's tell tale striNNNNNg.
or code Red's .../winnt/system32..... and drop it.

- Paul
----- Original Message -----
From: "Thomas Schweikle" <tschweiklefiducia.de>
To: <suse-securitysuse.com>
Sent: Saturday, October 12, 2002 3:23 PM
Subject: RE: [suse-security] does anybody know such a log

> > Yes I do. This is why it doesn't really bother me. I just
> > can't believe that there's still Nimda/Code Red infected
> > boxes out there. After more than one year.
>
> Unfortunately there are. And often newly installed boxes out there do not
> incorporate the neccessary fixes to harden them against Nimda/Code Red.
> Some admins don't apply these patches regulary...
>
> --
> Thomas
>
> --
> Check the headers for your unsubscription address
> For additional commands, e-mail: suse-security-helpsuse.com
> Security-related bug reports go to securitysuse.de, not here
>

-- 
Check the headers for your unsubscription address
For additional commands, e-mail: suse-security-helpsuse.com
Security-related bug reports go to securitysuse.de, not here

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]