Ok first. It is possible to clean the worm. You need to, or your network performance will suffer. Unplug your switch. Place one known clean machine on the net and down load the fixwelch.exe from macafee or symantec. Clean your network. Each machine. That includes patching machines. Then plug your switch back in. Yahoo is slow because of all the network traffic generated by the worms. Every windows machine thats infected is slamming your network with packets. Yeah they might just be ICMP, but it takes up space. Do The Right Thing...clean your network. On Fri, 2003-10-10 at 10:07, Rahul Amaram (2K-86) wrote: > Hi, > I am a student working as a lab assistant in my institute. We are > facing some real prob. with respect to the proxy server/gateway over here. > > The proxy server also acts as a gateway. Now this problem is mainly > concerned with usage of Yahoo messenger. > > Initially we had only proxy server. Now in order to enable yahoo to > connect without proxy server we enabled the yahoo port (5050) through > iptables (nat). > > This worked fine for some days. But after some days whenever we used to > enable nat thru iptables, the CPU utilization used to become 100% and the > pc used to hang. > > We did tcpdump and found that we were getting too many ICMP requests. This > seems to be because of the worm "W32.Welchia.Worm" which is spread in our > network. > > We tried cleaning this worm but to no use. Now I got two quesions ... > > (1) Now assuming that it is not possible to clean that worm from the > network, is it possible for me to setup rules in iptables so that all the > ICMP requests generated by that worm are ignored ??? > > (2) Secondly Yahoo messenger does work thru proxy server but it is > extremelyyyyyyy slow. So is it possible to do some setting in the proxy > server ... so that Yahoo works faster !!! > > > SOMEONE PLZZ HELP ME OUTTT !!! > > > - Rahul. -- Michael Gargiullo <mgargiullo@xxxxxxxxxxxxx> Warp Drive Networks -- redhat-list mailing list unsubscribe mailto:redhat-list-request@xxxxxxxxxx?subject=unsubscribe https://www.redhat.com/mailman/listinfo/redhat-list
