[thelist] speaking of security...

[jsWalter]

> -----Original Message-----
> From: thelist-bounces at lists.evolt.org
> [mailto:thelist-bounces at lists.evolt.org]On Behalf Of Ken Schaefer
> Sent: Wednesday, August 13, 2003 10:03 PM
> To: thelist at lists.evolt.org
> Subject: Re: [thelist] speaking of security...
> 
> 
> You don't mention what Webserver software you are using,

oh, sorry, I should have, your right...

   Apache 2


> but most can be configured to answer on an IP address+port+host
> -header combination...

Right.

I'm looking into making Apache ignore addresses and address ranges.


> Most of these worms will not be able to contact your webserver
> (well, it won't reach any of your websites), since they are
> incapable of looking up entries in the DNS.

That is what I undrstand as well.

 
> Alterantively, install a firewall. Block requests to port 80 from 
> non-local (or non-trusted) addresses...

Yes, I'm looking into that as well.

Thanks for the ideas.

Walter