Click to See Complete Forum and Search --> : How to set the iptable for antivirus of nimda@pe & sircam


activeflash
11-05-2001, 09:55 PM
Can anybody tell me how to write the iptable rule to set block nimda & sircam virus
thanks

wreckd
11-08-2001, 12:51 AM
iptables blocks tcp/ip packets based on things like source or destination address port.....you can't block mail attachments like sircam with a packet filter.

as far as nimbda, easy enough....block port 80. all of the nimbda attacks as far as i know are directed at ms iis running on port 80. of course if you aren't running iis behind your firewall....don't bother.

[ 07 November 2001: Message edited by: wreckd ]