Hi, > ask where this FAQ entry is... http://www.netfilter.org/documentation/FAQ/netfilter-faq-3.html#ss3.14 > second, I've been using ipkungfu to attempt to stop codered, nimda, etc > from hitting my apache server and clogging up my logs. > It's not working, the rules never trigger. I've played around with it to > no avail. I do not know how ipkungfu works, i'd have to check it out to see if it can works and if it is a valid and clean solution. > I guess, if this doesn't work, and isn't supposed to work, what SHOULD I > do? Patch your affected servers, use unaffected software and inform the netadmins of infected hosts about virii. Regards, Maciej