[cobalt-security] NIMDA Attacks - Anyway to deny requests?

["Ervin Tarkhanian" <ervin@xxxxxxxxxx>]

Hi all,

I'm wondering if there's a way to deny requests to the folders NIMDA attacks
are requesting?

I see in my log there are key folders being scanned/requested:

/scripts/
/c/winnt/
/d/winnt/
/MSADC/
/_vti_bin/
/_mem_bin/

And many upper/lowercase combinations.  I know that Cobalt/*nix servers wont
get "infected" by the virus (I think).  But the shear volume of requests are
so high, that server performance is suffering.  Would denying requests have
an affect on server performance, if it's even possible.

Any suggestions are appreciated.

Best regards,
Ervin Tarkhanian