*.mil:80 disconnected in self-defense?

Mon Jul 23 21:05:15 UTC 2001

As soon as CERT released info on the IIS exploit, before Code Red, we yanked
all our IIS servers down. We are moving those vhosts back to
OpenLinux-Apache/FrontPage.

> -----Original Message-----
> From: George William Herbert [mailto:gherbert at retro.com]
> Sent: Monday, July 23, 2001 2:04 PM
> To: nanog at merit.edu
> Cc: gherbert at gw.retro.com
> Subject: *.mil:80 disconnected in self-defense?
> 
> 
> 
> 
> I have a report that .mil disconnected port 80 traffic
> from outside hosts, and possibly some other stuff,
> in response to DOS attacks last week.
> 
> There was some discussion on the inetproviders list this
> morning on the topic, and then I asked someone inside
> who confirmed the cutoff and said there's a DISA alert
> and operational bulletin about it.
> 
> It seems to be Just One of Those Months.
> 
> 
> -george william herbert
> gherbert at retro.com
> 