[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: WTF, a new IIS worm?

To: misc_(_at_)_openbsd_(_dot_)_org
Subject: Re: WTF, a new IIS worm?
From: Thorin Oakenshield <thorin_(_at_)_linux_(_dot_)_it>
Date: Thu, 9 Sep 2004 06:35:24 +0200
Mail-followup-to: misc_(_at_)_openbsd_(_dot_)_org

On Wed, Sep 08, 2004 at 10:23:02PM +0200, Han Boetes wrote:

> > Sep 08 18:00:03.522998 rule 0/0(match): block in on fxp1:
> > 199.237.51.7.3983 > 10.0.0.2.18969: S 3594171567:3594171567(0) win
> > 16384 <mss 1400,nop,nop,sackOK>
> 
> 
> In my pf.conf this is the first rule after passing in the natted traffic:
[..]
I'll try it, let's see if will be useful to me, THNX.

-- 
Pierluigi De Rosa (thorin_(_at_)_durin_(_dot_)_khazad-dum_(_dot_)_net).

References:
- WTF, a new IIS worm?
  - From: Thorin Oakenshield
- Re: WTF, a new IIS worm?
  - From: Han Boetes

Prev by Date: Re: dual-Opteron OpenBSD 3.6 will be faster than FreeBSD, right?
Next by Date: OpenBSD on a SunFire V100
Previous by thread: Re: WTF, a new IIS worm?
Next by thread: Re: Mis-configured network.
Index(es):
- Date
- Thread

Visit your host, monkey.org