On Monday 06 August 2001 11:39 am, Thomas Mondoshawan Tate wrote: > Mm... Good points. I hadn't thought about it with regards to bandwidth > issues, etc. Perhaps then just a simple script running on a webserver that > sends an e-mail to postmaster@infected.ip.that.hit? Or would that be > considered unsolicited e-mail/SPAM? Keep in mind that in the case of Code Red (and *most* worms), the infected host is running Windows. How many windows boxes do you know that have a mail server correctly setup and running so that 'postmaster@ip' would even work :-) -- Kurt Granroth | http://www.granroth.org KDE Developer/Evangelist | SuSE Labs Open Source Developer granroth@kde.org | granroth@suse.com KDE -- Conquer Your Desktop