[Xitami] "default.ida?"

[Eldridge Currie]

Thanks, Craig, for the informative and anxiety removing reply re "Code Red"
and Xitami.

Even thou, "There ain't no stinkin' GUI here.",  I have downloaded your your
Windows EzMTS Advanced E-mail Server. I guess I am just a glutton for
punishment as I am a self-taught duffer viz programming etc.

EzMTS - A _free_ Win32 EMail Server Downloads:
http://www.ezmts.org/downloads.php#sec1

Eldridge
My Pathetic Little Site (when I am online, of course) :)
http://etco-group.homeip.net/

I am using Tako Schotanus' great program to update my IP addresss.
http://www.palacio-cristal.com/default.asp?main=/Products/DeeEnEs

----- Original Message -----
From: "Craig Morrison" <craig@2cah.com>
To: <xitami@lists.xitami.org>
Sent: Monday, August 06, 2001 8:48 AM
Subject: Re: [Xitami] "default.ida?"


>
> Can you say, "Code Red"? I thought you could..
>
> Seriously though, it is an infected system trying to infect your system
via
> Code Red.
>
> 1. No, not unless you want to spend all your time writing access masks.
> 2. They are trying to exploit a vulnerability that Xitami does not have.
> 3. They are trying to trigger a vulnerability in MS's IIS (v4,v5
unpatched)
> that allows the virus to have SYSTEM access to your server. Since you are
> running Xitami you don't have any worries.
>
> Just to have a little fun I set up a page just for those unfortunate souls
who
> do get infected. Instead of returning a 404 error, Xitami on my system
greets
> them with a "nice" welcome. :-)
>
> Eldridge Currie wrote:
> >
> > Questions:
> > 1. Is there anyway of keeping these people out of my system?
> > 2. What are they looking for?
> > 3. What does "default.ida?" mean?



---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.265 / Virus Database: 137 - Release Date: 7/18/01