Summary: Blocking nimda probes with a content-layer switch