[Firehol-support] linux.plupii worm + Firehol

[Redeeman]

On Mon, 2005-11-14 at 12:30 -0600, Hugo Vanwoerkom wrote:
> Hi,
> 
> A worm has been spotted recently that attacks Linux:
> http://www.securityfocus.com/brief/38?ref=rss
> 
> It uses a vulnerability in, among others, WordPress 1.2, which I use.
> 
> In its discussion on the Linux Debian User list I discovered Firehol. So 
> I started trying to use it.
> 
> There are at least 2 ways to protect against this worm:
> a. update your software (in my case security updates of Debian Sarge)
> 
> b. Use Firehol.
> 
> In the latter case, what statements specifically protect against this 
> worm, even if you did not update your software?
firehol doesent (to my knowledge) have any statements to block this
worm.. my guess is that they stated that it could be blocked with
firehol, and if that is the case, you have to figure out something the
worm uses, ports or something, and block it with firehol.

> 
> Thanks!
> 
> Hugo
> 
> 
> 
> -------------------------------------------------------
> SF.Net email is sponsored by:
> Tame your development challenges with Apache's Geronimo App Server. Download
> it for free - -and be entered to win a 42" plasma tv or your very own
> Sony(tm)PSP.  Click here to play: http://sourceforge.net/geronimo.php
> _______________________________________________
> Firehol-support mailing list
> Firehol-support at lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/firehol-support
>