Re: Stopping Admin Alert SPAM

From: Ed Sunder (edsunder@3hd.com)
Date: 01/24/03

  • Next message: Thomas Cameron: "RE: w2k server compromised" 
    Date: Fri, 24 Jan 2003 09:38:41 -0500
From: "Ed Sunder" <edsunder@3hd.com>
To: <focus-ms@securityfocus.com>

    It appears the port that was being used (in my case anyway) was 445. By
    blocking 135, 137-139 and 445, they aren't getting through anymore.

    Thanks to all who responded,

    Ed Sunder
    Three HD