Posted by
cal, 00:06, 26th January 2003:
The internet is currently having big problems due to a MS-SQL worm causing DOS style problems.
more info:
212.100.234.54/content/56/29027.html
forums.military.com/1/OpenTopic?a=tpc&s=...
www.americanintelligence.us/modules.php?...
traffic analysis:
www.internetpulse.net/
average.matrix.net/
Posted by
Gary, 18:51, 26th January 2003:
Rule "MS-SQL Worm Block Rule" blocked (194.131.158.41,ms-sql-m(1434))
Inbound UDP packet
You can say that again. My poor firewall was going nuts yesterday (see above)! It's not too bad today though.
Posted by
ell, 03:51, 27th January 2003:
FYI the main page doesn't auto-hyperlink.
Posted by
cal, 08:13, 27th January 2003:
opps - thanks ell. fixed now
What, What, What? You mean a microsoft product has a security 'issue'?
Posted by
cal, 09:40, 27th January 2003:
strangely. but then so do all software products. look at bind - that's caused more internet problems than all other pieces of software put together
yeah, suppose, I do have a rather anti-MS streak though.
Posted by
ell, 04:14, 28th January 2003:
Is it me, or does a firewall/SQL server that detects thousands of near-identical "are you alive?" UDP packets going to the same port every second then DROPs all such packets for 10 mins seem like a good idea?
Posted by
cal, 09:14, 28th January 2003:
it's not particularly great design - there shouldn't have been such an open "ping-like" command available
I just spent the last hour without web access, my god I did'nt realise how much I rely on it.