Re: iptables anti-nimda anyone?

From: Bjørn Ruberg (bjorn@linpro.no)
Date: 09/21/01 

To: Bugtraq - Focus Linux <focus-linux@securityfocus.com>
Subject: Re: iptables anti-nimda anyone?
From: bjorn@linpro.no (Bjørn Ruberg)
Date: 21 Sep 2001 17:17:03 +0200
Message-ID: <uiz1yl0zi8g.fsf@false.linpro.no>

Rob 'Feztaa' Park <fezziker@home.com> writes:

> On Wed, 19 Sep 2001, Konrad Michels (dis)graced my inbox with this:
>
> > Hi everyone
> > I don't suppose one of our iptables gurus out there has an iptables rule
> > to filter out this damn nimda thing? I'm really annoyed about it
> > filling up my apache logz and would love to drop the packets 'ere they
> > get to the apache server . . .

Hm, I tried to send to the list earlier, but it doesn't seem to have come
through.

Anyways, the patch-o-matic set of patches with iptables 1.2.3 has string
matching included. Might be worth trying.

Hope this helps
Bjørn 

-- 
Bjørn Ruberg, Linpro AS
bjorn@linpro.no

The more you scream, the less you hear. (Fish)

Relevant Pages

  • iptables blocks access to some websites?
    ... I have a problem where only some websites are inaccessible via ... I found something related to MTU, PPTP and this iptables rule: ...
    (comp.os.linux.networking)
  • Re: iptables anti-nimda anyone?
    ... Subject: iptables anti-nimda anyone? ... On Wed, 19 Sep 2001, Konrad Michels wrote: ... > I don't suppose one of our iptables gurus out there has an iptables rule ...
    (Focus-Linux)
  • cant shutdown pc when using iptables rule
    ... When I add any iptables rule, ... Debian Lenny's with GNOME ... problem is almost the same (when shutdown, or reboot it still hangs): ...
    (Debian-User)
  • Re: IPTables
    ... for iptables rule which could be use with command ... With 'iptables -A' command, ... unsubscribe mailto:redhat-list-request@redhat.com?subject=unsubscribe ...
    (RedHat)
  • Re: iptables anti-nimda anyone?
    ... Subject: iptables anti-nimda anyone? ... >> I don't suppose one of our iptables gurus out there has an iptables rule ... >> filling up my apache logz and would love to drop the packets 'ere they ... i'd love to set up a rule that automatically drops nimda ...
    (Focus-Linux)