RE: CODE RED!!!!!!!!!

  • From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
  • To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
  • Date: Mon, 20 Aug 2001 13:03:04 -0400

You got it...thats is what is bothering me. How it will diffrentiate between
different request. Well lets try it. And other thing is, Do I need to modify
the DNS to point to vitual IP for all FQDN?


-----Original Message-----
From: David Dellanno [mailto:david@xxxxxxxxxx]
Sent: Monday, August 20, 2001 1:00 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


The question that keeps popin in my mind, once the public side is setup for
NLB, will there be a conflict with the virtual ip address used in the
publishing rules?  I'll try it too...just for kicks...good to know

-----Original Message-----
From: Sharma, Shobha [mailto:c-ssharma@xxxxxxxxxxx]
Sent: Monday, August 20, 2001 12:56 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


I didn't do it yet...testing in our production environement is really
difficult. And then this code red problem. Did you do it. I will be working
on that from mid of this week. I have never configured NLB as such. But if I
get success I will definetly let you know. And any help is welcome.
Thanks
Shobha


-----Original Message-----
From: David Dellanno [mailto:david@xxxxxxxxxx]
Sent: Monday, August 20, 2001 12:44 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


Shobha, 
        How did you make out with your ISA2000 stand-alone configuration
using NLB?

-----Original Message-----
From: Sharma, Shobha [mailto:c-ssharma@xxxxxxxxxxx]
Sent: Monday, August 20, 2001 12:39 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


I thought so. OEM told me to run MS script and i did that. It didn't say its
infected but I don't know why those strange entries appear in the logs. Iam
keeping an eye on the server.

-----Original Message-----
From: Jim Harrison [mailto:jim@xxxxxxxxxxxx]
Sent: Monday, August 20, 2001 12:16 PM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


The script doesn't modify anything.  It merely searches for the known signs
of infection.

Jim Harrison
MCP(2K), A+, Network+, PCG

----- Original Message -----
From: "Sharma, Shobha" <c-ssharma@xxxxxxxxxxx>
To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
Sent: Monday, August 20, 2001 6:01 AM
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org


No I didn't. Its running Datacenter on ES7000  and according to the
standards I can't run anything without OEM knowledge. Has anybody run that
script on datacenter, is it safe to run on it.

-----Original Message-----
From: David Dellanno [mailto:david@xxxxxxxxxx]
Sent: Monday, August 20, 2001 8:50 AM
To: [ISAserver.org Discussion List]
Subject: [isalist] RE: CODE RED!!!!!!!!!


http://www.ISAserver.org



This message is in MIME format. Since your mail reader does not understand
this format, some or all of this message may not be legible.

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
jim@xxxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')



------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
david@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
david@xxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')

------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
c-ssharma@xxxxxxxxxxx
To unsubscribe send a blank email to $subst('Email.Unsub')


Other related posts: