Dear Marty and LSTSRV-L Folks,

Sorry you got hacked. I've had good luck with a hardware
firewall, so pharr.

>We have a LISTSERV(tm) 1.8d running on NT 4.0 using
>IIS 3.0.

Ummm. Isn't it IIS 4 that comes in the NT 4.0 Option
Pack, or on the Server install CD, for *free*?!? I would
definitely check that and upgrade to 4 - if my memory
(what little there may be of it) is correct.

Re-apply the SP6a service pack after every software
change, from now on.

The other thing to do, and I know it hurts, is to
actually figure out and perform all the steps at:

CERT

Securing a stand-alone Windows NT 4.0 Server during initial installation
  http://www.cert.org/security-improvement/implementations/i025.03.html

Also check:

Windows NT Security and Configuration Resources
  http://www.cert.org/tech_tips/win-resources.html

The second link has lots of IIS-specific leads.

I hope this helps.

 Pax,
Ballew Kinnaman <[log in to unmask]> 206/463-2322
Discussion list owner:
Allergy ---> http://www.Immune.Com/allergy/index.html
Arthritis ---> http://www.Emissary.Net/arthritis/index.html
Latex Allergy ---> http://www.Immune.Com/rubber/index.html
Thyroid ---> http://www.Emissary.Net/thyroid/index.html