Re: New IIS worm

2001-09-21 Thread Johann Schwarzmeier
Hello, Hint: see wat iv'ed done: /etc/apache/srm.conf: Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi The CGI: echo "You come from : ${REMOTE_ADDR}" sudo ipchains -I wan-in -j DENY -l -s ${REMOTE_ADDR} sudo ipchains -I wan

Re: New IIS worm

2001-09-21 Thread Johann Schwarzmeier
Hello, Hint: see wat iv'ed done: /etc/apache/srm.conf: Alias /c/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi Alias /d/winnt/system32/cmd.exe /usr/lib/cgi-bin/block.cgi The CGI: echo "You come from : ${REMOTE_ADDR}" sudo ipchains -I wan-in -j DENY -l -s ${REMOTE_ADDR} sudo ipchains -I wa