NOOP Time :)

  • From: David Dellanno <david@xxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Fri, 10 Aug 2001 21:53:05 -0400

Thanks Hugo,
        I thought I saw awhile back you mention you gave it ~64 bytes...I'll
give it a shot.

Thanks
-----Original Message-----
From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx]
Sent: Friday, August 10, 2001 9:29 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RES: RE: Code Red still bugs some IIS 4 Web-server
operators


http://www.ISAserver.org


David, I think that SMTP filter will let only the commands that are present.
If you remove a command, ISA SMTP filter will not accept an SMTP session
with this command.
 
Probably you removed NOOP because you receved alerts telling you that
someone exceded the maximum accepted command size configured in ISA SMTP
filter. Usually what I do in ISA deployments is to set NOOP maximum command
size to ~ 50 bytes to get rid these alerts and ISA not reject SMTP messages
from these remote hosts.
 
HTH.

-----Mensagem original----- 
De: David Dellanno 
Enviada: sex 10/8/2001 22:04 
Para: [ISAserver.org Discussion List] 
Cc: 
Assunto: [isalist] RE: Code Red still bugs some IIS 4 Web-server operators



http://www.ISAserver.org


Hi Hugo,
        I'm starting to get a ton of 'ISA Server alert: An unsafe SMTP
command'

Body:
        ISA Server name: ATLSRV02
        NOOP

The funny thing, NOOP is diabled in the SMTP filter, do you have any ideas?

-----Original Message-----
From: Hugo Caye [mailto:Hugo@xxxxxxxxxxxxx]
Sent: Friday, August 10, 2001 9:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] Code Red still bugs some IIS 4 Web-server operators


http://www.ISAserver.org


Code Red still bugs some IIS 4 Web-server operators
 
Code Reds I and II are still punching Web sites offline -- even those with
patched servers. IIS 4 users have found that either version of the worm can
crash patched Web servers if those systems are configured to redirect
visitors. Microsoft is reportedly working on a fix for this.
 
http://www.newsbytes.com/news/01/168907.html




------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
david@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
Hugo@xxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')






------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
david@xxxxxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: