[Firehol-support] Re: linux.plupii worm + Firehol
hvw59601 at care2.com
Tue Nov 15 18:40:53 GMT 2005
> On Mon, 2005-11-14 at 12:30 -0600, Hugo Vanwoerkom wrote:
> firehol doesent (to my knowledge) have any statements to block this
> worm.. my guess is that they stated that it could be blocked with
> firehol, and if that is the case, you have to figure out something the
> worm uses, ports or something, and block it with firehol.
Thanks! Nice of you to answer. I note that I did not examine iptables
docs close enough. I found it answered in a FAQ (who knows where :-))
that worms rely on code above iptables, like PHP4, etc. Inappropriate
for control at such a "low" level.
More information about the Firehol-support