Re: Code Red round two

[Dave Stewart <dbs () ntrnet net>]

At 09:49 AM 7/31/2001, Jeff Ogden wrote:
> So what, if anything, are people planning to do differently as 8 pm EDT 
> today and the possibility of a new round of Code Red Worm activity 
> approaches? Are there things that we as network operators can and should 
> be doing beyond encouraging end users to patch their vulnerable systems?

You can scan your network(s) for machines that are vulnerable, and patch 
them.  Or contact the end users and require that they patch them.... if 
they aren't patched by 7:45pm or so, you can block port 80 access to those 
machines until they are patched.