Klarinet Archive - Posting 000748.txt from 2001/09

From: "Mark Charette" <charette@-----.org>
Subj: [kl] To anyone running Apache Web Servers
Date: Fri, 21 Sep 2001 22:20:52 -0400

Dear friends,
The Sneezy Web server, which hosts a number of music related sites both
commercial and non-commercial, was running a bit slow today. I isolated the
problem to the nimda virus trying to hijack Sneezy.

Sneezy runs the Apache web server, so nimda doesn't affect it except for
loading the server down more than it should. I did develop a work-around
that is performing admirably, and for the 10 or so of you who run Apache
servers, here's what you can do:

Enable the Rewrite module when you compile Apache and put the following
lines in the httpd.conf file:

<Directory _your_main_web_directory_goes_here_>
AllowOverride FileInfo
RewriteEngine on
RewriteRule (.*)cmd.exe(.*) http://www.microsoft.com [R]
RewriteRule (.*)root.exe(.*) http://www.microsoft.com [R]
</Directory>

The attempted attack goes over to the corporate MSoft web servers which are
able to withstand the net congestion much better than I.

Mark C.

---------------------------------------------------------------------