|
[Date Prev] [Date Next] [Thread Prev] [Thread Next] [Date Index] [Thread Index]
|
Re: [PLUG] Attacked by spammers
|
On Wed, Aug 08, 2001 at 07:09:20AM -0400, aab@drexel.edu wrote:
> Code Red shouldn't be attacking your mail server until you are also
> running a web server on the same host.
Sure, but if Code Red makes its way into a private subnet (that is,
10.0.0.0/8, 192.268.0.0/16, or 172.16.0.0/12) it will *really*
pounce on everything within that subnet since there will be far
fewer hosts within its /16 or /24 CIDR to hit. Though there was no
specific mention of this in the original post, it could be a
possibility.
Also, enough machines on your ISP being infected will mean that
anything with an externally addressable IP address will see plenty
of traffic.
I think the original poster's point, though, was that he's not
seeing enough Code Red requests on this host to justify that being a
limiting factor in his bandwidth. The more important question is
what's wrong with his exim.
--
~ g r @ eclipsed.net
______________________________________________________________________
Philadelphia Linux Users Group - http://www.phillylinux.org
Announcements-http://lists.phillylinux.org/mail/listinfo/plug-announce
General Discussion - http://lists.phillylinux.org/mail/listinfo/plug
|
|