[Firehol-support] Re: linux.plupii worm + Firehol

[Hugo Vanwoerkom]

Redeeman wrote:
> On Mon, 2005-11-14 at 12:30 -0600, Hugo Vanwoerkom wrote:
> 

<snip>

> 
> firehol doesent (to my knowledge) have any statements to block this
> worm.. my guess is that they stated that it could be blocked with
> firehol, and if that is the case, you have to figure out something the
> worm uses, ports or something, and block it with firehol.
> 
> 

Thanks! Nice of you to answer. I note that I did not examine iptables 
docs close enough. I found it answered in a FAQ (who knows where :-)) 
that worms rely on code above iptables, like PHP4, etc. Inappropriate 
for control at such a "low" level.

Hugo