Maybe so... but did you guys see slashdot today?  There's a link on there
that will give you some code that will use the exploit to fix the server
that attacked you.  There's a default.ida file you can stick on your apache
server, associate it with as a cgi-script, and it will use the remote
exploit to stop iis and reboot the server.

If you're not running a code-red infected box, or going thru a code-red
infected proxy, you should see plain text and your box (or proxy) won't get
rebooted :)... http://www.dasbistro.com/default.ida 

Eric

Craig White writes:

> default.ida is reference for MS Indexing Services - the code will cause the
> services to break.
> 
> Redirection is a waste of bandwidth - forget it.
> 
> Craig
> 
> > -----Original Message-----
> > From: plug-discuss-admin@lists.plug.phoenix.az.us
> > [mailto:plug-discuss-admin@lists.plug.phoenix.az.us]On Behalf Of William
> > Lindley
> > Sent: Saturday, August 11, 2001 6:31 AM
> > To: plug-discuss@lists.plug.phoenix.az.us
> > Subject: Re: format of default.ida file?
> >
> >
> > What is default.ida anyway?
> >
> > And how exactly does one redirect a page as suggested earlier?  My website
> > is hosted on pair.net, not on my (dialup) box.
> >
> > \\/
> >
> > ________________________________________________
> > See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail
> > doesn't post to the list quickly and you use Netscape to write mail.
> >
> > PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> > http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss
> >
> 
> ________________________________________________
> See http://PLUG.phoenix.az.us/navigator-mail.shtml if your mail doesn't post to the list quickly and you use Netscape to write mail.
> 
> PLUG-discuss mailing list  -  PLUG-discuss@lists.PLUG.phoenix.az.us
> http://lists.PLUG.phoenix.az.us/mailman/listinfo/plug-discuss