Ascend Archive
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: (ASCEND) Win Nuke filtering doesn't work on MAX4000



Hi,
> Question:
> How do I protect my network against Win Nuke attacks?
> Answer:
> To protect your network against Win Nuke attacks, all you need
> to do is to add a simple data filter to your ethernet port of
> your Ascend MAX/Pipeline unit.
> 
> Create a new filter profile with the following properties:
> Under Out Filter 01 -
> Valid=Yes
> Type=IP
> IP... -
> Forward=No
> Protocol=6
> Dest Port Cmp=Eql
> Dest Port #=139
> 
am i correct in assuming that this filters out Port 139 IP packets ?
if so.. there are winnuke versions (teardrop for example) that can use
ANY port.
i once tried it on port 200 (an unused port) on a WinNT server with SP3
and it froze up.
The windowsNT teardrop fix solved that .. 

i hope it's of use,
 
----=== G. Saraber "Miztic"               gsaraber@nwonline.net ===---
"Installing linux on your office computer is like a
                                    mailman who takes an uzi to work"
++ Ascend Users Mailing List ++
To unsubscribe:	send unsubscribe to ascend-users-request@bungi.com
To get FAQ'd:	<http://www.nealis.net/ascend/faq>


References: