-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On Tue, 24 Oct 2006, Juan Carlos Peláez Mendoza wrote:
Hi list,
My IP Address have been listed in the RBL's too many times, I
installed into my linux box MailScanner + Spamassassin + Clamavmodule
+ FProt, I set up the iptables rules allowing only smtp, pop and ssh
traffic, but when I see the traffic with tcpdump I see this strange
behavior:
[SNIP]
What can I do to stop and block this worm???
Wipe out the OS on 192.168.0.92, reinstall from scratch and apply all
patches and updates prior to exposing to the internet. that should clear
up the sapm worm.
Thanks,
Ron DuFresne
- --
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
admin & senior security consultant: sysinfo.com
http://sysinfo.com
Key fingerprint = 9401 4B13 B918 164C 647A E838 B2DF AFCC 94B0 6629
...We waste time looking for the perfect lover
instead of creating the perfect love.
-Tom Robbins <Still Life With Woodpecker>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)
iD8DBQFFR6nnst+vzJSwZikRAnNPAJ9F4HQkzAQjkKSaNVr6+uNg4FE44ACfSsDf
CrGJLJ9MZPZbV1wJu76Faos=
=4IZ+
-----END PGP SIGNATURE-----
|