Re: [SLE] Martian source

The 03.10.09 at 15:05, Togan Muftuoglu wrote:

IIRC one of the recent worms were using windowsupdate.com with an address of 127.0.0.1 and microsoft had to drop the DNS record for windowsupdate.com

Aha! I knew there was some thing out there. :-)

If you have "snort" installed and configured and running you may see the following in your alert file

Now that you mention it... I had it running on my older machine, but for some reason, not on this system. I'm firing up Yast right now :-)

Yet this is all I can say :-(

Well, it's more than I knew. -- Cheers, Carlos Robinson