Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) WinNUKE filter?





Dont you just love NT?, I believe there is a fix out now that 
MicroSoft has supplied, They have the fix avail for both NT and
95.

Jason Nealis
Erols Internet


> From:          "Lars Foerster" <root@guru.freeway.de>
> Date:          Thu, 15 May 1997 19:06:48 +0200
> To:            SKozicki@bluestar.net, ascend-users@max.bungi.com
> Subject:       Re: (ASCEND) WinNUKE filter?

> Hi,
> 
> > Anyone have one already implemented? As far as I know, all you need to
> > do is block incoming port 139. But I don't know the Protocol number
> > (NBT, or NetBIOS over TCP/IP). Anyone know off hand?
> 
> just block UDP and TCP for port 139 - it worked for me (NBF isn't routed by the
> MAX - as far a I remember it isn't routable at all).
> 
> There is no special protocol for NetBIOS over TCP/IP, it just uses UDP and TCP
> for transport.
> 
> 
> Take also care about port 135 - telnetting to port 135 and typing some keys
> makes the rpc-process use 100% CPU........ (done so on WINNT4.0 german
> version).
> 
> 
> So you better block that one too....
> 
> 
> 
> -- 
> 
> 
> MfG,
> 		Lars Foerster, 
> 				Systemadministrator
> 
>   -------------------------
>  / eMail: lars@freeway.de  \	
> -                           --------------------------------------------------
> 
> F r e e w a y  N e t s e r v e r  G m b H 
>  - Internet Service Center -
> Ludwig-Rinn-Str. 14-16
> 35452 Heuchelheim
> Germany
> Fon +49 641 9678-0
> Fax +49	641 9678-12
> eMail: info@freeway.de
> 
> ------------------------------------                                    ------
>                                     \ "Never touch a running system !" /
>                                      ----------------------------------
> 
> To assure mail consistency and authenticy:
> 
> PGP-Version: 2.6.3i
>  
> mQCNAzHGm7EAAAEEAMhUhXH8CbfLxeQCRRTnjA98dI9BmHPD9g8/3nIkOTLI87U4
> EQnOJD1l8wICmYG2PI9EoZO7BvURrk3dxuz8dxYyG3xa/iCXfxabEq7RBNAgOpY/
> niyIBwtLUiabPITHdG3seM/q/tjJFIAS6k8bH0niqcMc8ml2soGjEzlQX3gVAAUR
> tB9MYXJzIEZvZXJzdGVyIDxsYXJzQGZyZWV3YXkuZGU+iQCVAwUQMcabsoGjEzlQ
> X3gVAQHU0gP9FBTCzvQv2JSKIflHwpOCVXo1MB9QAfndoRKyHCGddEoBJ29FxBmX
> 3KleUkVBw4ZI6wZ4jngyCKjxEcy9Vw9eRf4zzUhMVa0aYTgf7fqOcYE6iqOrP6t3
> kjVX8f3quzn+j9tbWVQI6p6QMUWOczUJHaQZok0TjyAHl6pTRK3K5Co=
> =iKwu
> ++ Ascend Users Mailing List ++
> To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
> To get FAQ'd:	<http://www.shore.net/~dreaming/ascend-faq>
> or		<ftp://ftp.shore.net/members/dreaming/ascend-faq.txt>
> 
> 
> 
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.shore.net/~dreaming/ascend-faq>
or		<ftp://ftp.shore.net/members/dreaming/ascend-faq.txt>


References: