[Xitami] Security Issue - Disabling Script Processing

admin xitami@lists.xitami.org
Tue, 14 Jan 2003 17:52:47 -0800


>
> In addition, to the other gentlemen's comment, this has also nothing to do
> with a firewall or not.  This hack is coming in on port 80 which the
> firewall has no control over.  The router routes port 80 traffic to our
> internal web server correctly.

Sure.
But once you can be infected by a Nimda kind of virus, the firewall will ask
you if you allow the move out to the internet.

I`m not saying this is Nimda, but if a troyan is planted into your server,
then it will search new victims, and the firewall will tell you that move.

I get hundreds of such attemps everyday, but the answer is always 404.

Get your W2K updates, and tune your antivirus as well.

Good luck:

Carlos