[NCLUG] Re: Not Code Red (another Code Red topic)

[mike cullerton]

hey bill, et al,

YAfix for the cisco's. try setting the webserver to another port. (yes, i
know you have turned the server off :)

in enable mode

  set web port xxxx  (where the x's are some number other than 80)

i continued to have some trouble myself and was working with some friends at
frii trying to track it down. this weekend my troubles increased as well.
then, i heard the above fix from one of the frii folks.

heck, i've been up about 6 hours now!

btw, can anyone tell me if this is a code red attempt?

  [Mon Aug  6 21:05:57 2001] [error] [client 24.31.122.180] Client sent
malformed Host header

mike

on 8/6/01 9:50 PM, thorson at aster.com at thorson at aster.com wrote:

> 
>> I'm up to 154 Code Red II's and 138 Code Red 1's on my dynamic, single
>> IP DSL this past 4 weeks.  I'm sure there are more from people who are on
>> cablemodem but this is quite bad IMHO...  (but it's fun scripting to count
>> :)
> 
> Has anyone experienced crashing DSL modems that can be attributed to CodeRed?
> 
> I have two DSL lines right next to each other. One with a Cisco 675 in
> bridging mode to frii supporting a static subnet.  The other is a Cisco
> 678 in ppp/router mode to qwest and supports 8 (5 usable) static IPs.
> 
> A week ago or so I disabled web access to both after hearing about
> CodeRed-I.  This weekend the 678 began crashing every few hours or so.
> Since it seemed to coincide with the growth of CodeRed-II I was thinking
> that it might be getting hit hard and having some type of overflow.  I
> put in a trouble report to qworst (as some say) Sunday afternoon and
> have yet to hear a reply.
> 
> Today it has been even worse.  I can't keep the modem up for more than an
> hour at a time.  Now I am wondering if this is a symptom of CodeRed
> at all.  The modem in bridging mode has been flawless but the other
> has been hell.  I would love to know if anybody else has experienced these
> types of problems.
> 
> Bill
> 
> P.S.  Cisco DSL modems have been infected with the Microsoft IIS virus.
> I read this on the Cisco pages.  Can you believe that anyone would
> actually burn MS crap into ROM?
> 
> _______________________________________________
> NCLUG mailing list
> NCLUG at nclug.org
> http://www.nclug.org/mailman/listinfo/nclug
> 


 -- mike cullerton