[huskerlug] Re: [huskerlug]W0rm loads...
- From: GreyGeek <jkreps@xxxxxxxxxx>
- To: huskerlug@xxxxxxxxxxxxx
- Date: Fri, 19 Sep 2003 17:04:45 -0500
On Friday 19 September 2003 02:31 pm, you wrote:
> I am so very happy to have Linux!
>
> I am getting about ten+ emails per hour, that contain
> w0rm attachments, from places like MICROSOFT.COM
> (spoofed, though) or, the message header states it is
> an 'URGENT MICROSOFT UPDATE', etc. or a message
> subject title with the word microsoft in it.
>
> So, I pity the unknowing users of microshaft, who open
> those things, thinking they are from the empire, when
> they are just w0rms! Using knoppix right now,
> installed Debian... so fast, so cool!
DITTOS!
I don't get that many emails because I don't subscribe to=20
many elists (currently this is the only one) and when I=20
comment or post I used a munged email address.
Our pleasure extends to the port attacks, too!
I run FireStarter just to log the volume and kinds of=20
attacks. =20
The volume on my PC is about 1 attack per second, only=20
counting those directed at me. If I count everything that=20
comes by it justs to several per second.
About 98% of them are ICMP attacks with 92 byte packets. =20
There is no way to prevent your box from echoing these but=20
they can't do any harm and the bot justs wastes time hitting=20
the wall. The rest of them are the occasional IGMP, the=20
odd asp, tcp, trinity, etc..
The biggest problem is the bandwidth these bugs consume,=20
which makes infected Windows boxes the biggest waster of=20
bandwidth on the internet. Imagine how fast it would be if=20
these buggers weren't flying around. mmm... if there was=20
some way to reduce their TTL...
=2D-=20
=2D=20
Remember, the Ark was built by amateurs; the Titanic by=20
professionals
GreyGeek
----
Husker Linux Users Group mailing list
To unsubscribe, send a message to huskerlug-request@xxxxxxxxxxxxx
with a subject of UNSUBSCRIBE
- References:
- [huskerlug] Re: [huskerlug]W0rm loads...
- From: Patrick
Other related posts:
- » [huskerlug] Re: [huskerlug]W0rm loads...
- » [huskerlug] Re: [huskerlug]W0rm loads...
- [huskerlug] Re: [huskerlug]W0rm loads...
- From: Patrick