Re: lug-bg: Nezemna boza

[nick@xxxxxxxx (Nikolay Hristov)]

----- Original Message -----
From: Vasil Kolev <vasil@xxxxxxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Wednesday, September 19, 2001 3:16 PM
Subject: Re: lug-bg: Nezemna boza

> Vizh v nqkoj apache mailing list
> Az sum subscribed za mailinglistata na edin drug webserver ( aolserver) i
> dneska horata se skusaha da postvat resheniq ( ednoto ot koito - direktno
> servera si praveshe spisuk s ip-ta ot koito idvat takiva zaqvki i gi
> filtrosvashe s iptables, i gi flushvashe na vseki polovin chas , imashe
> i drugi gotini resheniq ).
>
> Edin kratuk parser na logovete i neshto deto po nqkkauv nachin da spira
> teq neshta mislq che ne sa tolkova slozhni za izpulnqvane ,naprimer
>
> ipchains -F virused ;
> for i in `grep cmd.exe /var/log/apache/access.log|cut -d ' ' -f 1 ` ; do
>   ipchains -A viruses -I  $i -j DENY;
> done
>

imashe interesne post v debian-security po vyprosa za virusa i DENY-vaneto
mu prez frez firewall
ta po tochno ... kakvo bi stanalo ako niakoi prati zaiavka napodobiavashta
virusa sas spoofed ip , primerno default gateway-a wi ili pyk dns servera vi
:)

Nikolay Hristov

===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora