[Xitami] Security Issue - Disabling Script Processing
admin
xitami@lists.xitami.org
Tue, 14 Jan 2003 17:52:47 -0800
>
> In addition, to the other gentlemen's comment, this has also nothing to do
> with a firewall or not. This hack is coming in on port 80 which the
> firewall has no control over. The router routes port 80 traffic to our
> internal web server correctly.
Sure.
But once you can be infected by a Nimda kind of virus, the firewall will ask
you if you allow the move out to the internet.
I`m not saying this is Nimda, but if a troyan is planted into your server,
then it will search new victims, and the firewall will tell you that move.
I get hundreds of such attemps everyday, but the answer is always 404.
Get your W2K updates, and tune your antivirus as well.
Good luck:
Carlos