RE: popup msg spamming

From: Pavel Kankovsky (peakat_private)
Date: Tue Oct 15 2002 - 14:28:48 PDT

Next message: Hugo van der Kooij: "Re: apache problem"

Previous message: Hugo van der Kooij: "RE:"
In reply to: Hay,Daniel: "RE:"
Next in thread: H C: "RPC-Spam issue, was => RE:"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

On Tue, 15 Oct 2002, Hay,Daniel wrote:

> We are in the same boat, We have udp/tcp 135-139 and 445 blocked but
> we still see the spam.

At least in theory, one might probe (unfiltered) ports above 1024, esp.
1029/udp and 1030/udp (*), and check directly whether the messenger
service is listening there.

(*) AFAICT, in 90 % of cases, the messenger service is listening in one of
those two ports.

--Pavel Kankovsky aka Peak
"Welcome to the Czech Republic. Bring your own lifeboats."

----------------------------------------------------------------------------
This list is provided by the SecurityFocus ARIS analyzer service.
For more information on this free incident handling, management 
and tracking system please see: http://aris.securityfocus.com

Next message: Hugo van der Kooij: "Re: apache problem"
Previous message: Hugo van der Kooij: "RE:"
In reply to: Hay,Daniel: "RE:"
Next in thread: H C: "RPC-Spam issue, was => RE:"
Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

This archive was generated by hypermail 2b30 : Tue Oct 15 2002 - 14:41:47 PDT