From mboxrd@z Thu Jan 1 00:00:00 1970 From: Tabris Subject: Re: ipt_string problems and FAQ Date: Mon, 1 Sep 2003 08:21:41 -0400 Sender: netfilter-admin@lists.netfilter.org Message-ID: <200309010821.41115.tabris@tabris.net> References: <200308271319.29439.tabris@tabris.net> Mime-Version: 1.0 Content-Transfer-Encoding: 7bit Return-path: In-Reply-To: Content-Disposition: inline Errors-To: netfilter-admin@lists.netfilter.org List-Help: List-Post: List-Subscribe: , List-Id: List-Unsubscribe: , List-Archive: Content-Type: text/plain; charset="us-ascii" To: Maciej Soltysiak Cc: netfilter@lists.netfilter.org On Monday 01 September 2003 07:03 am, Maciej Soltysiak wrote: > Hi, > > > ask where this FAQ entry is... > > http://www.netfilter.org/documentation/FAQ/netfilter-faq-3.html#ss3.14 > Kay... Though as my friend asked, what IS it good for? examples? > > second, I've been using ipkungfu to attempt to stop codered, nimda, > > etc from hitting my apache server and clogging up my logs. > > It's not working, the rules never trigger. I've played around with it > > to no avail. > > I do not know how ipkungfu works, i'd have to check it out to see if it > can works and if it is a valid and clean solution. > http://www.linuxkungfu.org/ > > I guess, if this doesn't work, and isn't supposed to work, what > > SHOULD I do? > > Patch your affected servers, use unaffected software and > inform the netadmins of infected hosts about virii. fwiw, i don't use IIS, so I don't really get infected by it, but all the same I get it clogging up my logs... which is what i'm really trying to take care of here... no more crap in my logs. > > Regards, > Maciej -- tabris - Life only demands from you the strength you possess. Only one feat is possible -- not to have run away. -- Dag Hammarskjold