[Xitami] Why is this crashing me?
Ervin Kosch
xitami@lists.xitami.org
Tue, 16 Jul 2002 08:39:55 -0400
That is somebody who has a good old copy of the Nimda virus running.
Nimda works by flooding your server's buffers. Once the buffer is over
flowed someone could insert functional computer code onto your system.
Xitami isn't directly effected by the virus, rather it either ignore the
request and goes on or crashes. I know that my 2.4d9 is perty good at
handling Nimda. 2.5 anything is not the best.
What version are you running?
meijin wrote:
>Can anyone explain to me how to keep the following from crashing my Win2K
>Xitami server at least twice a week?
>
>66.21.214.27 - - [15/Jul/2002:20:18:19 -0600] "GET
>/default.ida?NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNNN
>NNNNNNNNN%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%u7801%u9090%u6858%ucbd3%
>u7801%u9090%u9090%u8190%u00c3%u0003%u8b00%u531b%u53ff%u0078%u0000%u00=a%20
>HTTP/1.0" 404 0 "" ""
>
>NeoTrace tracks this down to a Bellsouth user in Miami, FL...so I am going
>to send them a nastygram about it. But, I believe this is the Code Red
>virus...yes? Isn't there some way to block this or keep Xitami from choking
>on it every time I get hit? This is getting real old real quick.
>
>Thanks for any input!
>
>Mike
>
>
>--
>Xitami Users Mailing List -- For Xitami support
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
>
>
>