[Xitami] Can anyone help me

Melle Koning xitami@lists.xitami.org
Mon, 19 Nov 2001 23:58:25 +0100


Hello lonewolf,

Sunday, November 18, 2001, 11:37:45 PM, you wrote:

l> I like to no why this guy keeps run this same command like 300 400 times a
l> day.
l> "GET /scripts/..%c1%1c../winnt/system32/cmd.exe?/c+dir

Its the sircam virus.

You could try to hold the IP number off from xitami by including the
follwing line to xitami.cfg

[Security]
webmask=!a.b.c.d,*

Unfortunately, this does not seem to work :-(

-- 
Best regards,
 Melle                            mailto:m.koning10@chello.nl