[rescue] New worm?

[Sheldon T. Hall]

In Message: 12 To: rescue at sunhelp.org Steve Pacenka
<spacenka at mindspring.com> wrote on the subject of Re: [rescue] New worm?
thusly:

> I have an obscure server visited more by indexing bots than anything else.
> Now it generates a megabyte per day of error and access logs due to the
worm
> of the day looking for IISes to infect.

> So what OS and httpd servers should you run if you want to evade the
worms,
> virii, and rootkit intruders?  Is there a case for security through
obscurity?
> Rare OS  + rare WWW server = unattractive to the intruders?

There are some truly rare httpds out there ... one pretty good one is
implemented as a Bourne shell script and can be found at
http://math.ucr.edu:8889/software.  I wrote a trivial one as a joke (4 or 5
lines of Bourne) before I saw Chris Ulrich's, and I make no brief for my
Bourne shell scripting abilities....

-Shel