[Xitami] A Hack Attempt or What?

[John Poltorak]

On Sun, Aug 05, 2001 at 04:27:14PM -0500, Qwest wrote:
> Your guess would be wrong.  According to the SANS institute, only 18% of my
> security issues are MS specific.  

Yeah right....

Melissa, Love Bug, SirCam are often propagated via Unix systems.

I have yet to see a Unix system try to affect my Web server.

Running Xitami in preference to IIS is a step in the right direction, but 
dumping Windows as well is the next step to trouble free Web serving.


> The largest majority are Unix/Linux holes
> (67%) followed by SUN, Netware, and other misc. OSs.  You see more press on
> MS products because so many people use them.  If people didn't want MS
> products then MS wouldn't exists, 

People don't want them to exist - but don't get much of a choice. If you 
do run Xitami, the chances are that you have already paid for IIS. 

>but then who would we have to bitch about?

There wouldn't be any reason to bitch.

 
> -----Original Message-----
> From: xitami-admin@lists.xitami.org
> [mailto:xitami-admin@lists.xitami.org]On Behalf Of John Poltorak
> Sent: Sunday, August 05, 2001 4:02 PM
> To: xitami@lists.xitami.org
> Subject: Re: [Xitami] A Hack Attempt or What?
> 
> 
> On Sun, Aug 05, 2001 at 01:56:55PM -0500, Craig Morrison wrote:
> >
> > No your machines are not infected. Xitami is NOT vulnerable to the Code
> Red
> > attacks.
> >
> > The only way your machines can get infected is if you are running IIS on
> them.
> > You'll find more information about the vulnerability in IIS here:
> >
> >  http://www.microsoft.com/technet/security/bulletin/MS01-033.asp
> 
> I would guess that 99.9% of the Internet's viruses and worms are
> distributed and propagated courtesy of Microsoft.
> 
> The best way to protect yourself is to avoid all Microsoft products.
> 
> > GunnarSwan wrote:
> > >
> > > Again, I am running Xitami on NT set up as a bastion host.
> > > Is it safe to assume that all the IP addresses in my Access and Error
> logs ... that all those machines have been infected?
> >
> > --
> >
> > Craig Morrison
> >   MTS Professional @ http://www.2cah.com/
> >   A Win32 Email server that works for _you_.
> > EzMTS - A _free_ Win32 EMail Server
> >   http://www.ezmts.org/
> >   Anonymous FTP at ftp://ftp.ezmts.org
> >

-- 
John