Re: Would a firewall prevent Sasser worm?
From: Bill Unruh (unruh_at_string.physics.ubc.ca)
Date: Tue, 4 May 2004 16:27:45 +0000 (UTC)
Piotr Makley <firstname.lastname@example.org> writes:
]If I had a firewall would that prevent the Sasser worm infecting my
]I mean, if another infected system cannot see my ports because they
]are stealthed then presumably Sasser could not infect me?
Sassler cannot infect you if you do not run Windows. Sassler cannot
infect you if you install the patch from Microsoft. A firewall might
help, but if you insist on not doing the first two you will always be in
danger. Note that a firewall has nothing to do with "stealthing" your
ports. It simply rejects all attempts to connect to ports except those
you deliberately open. You can do the same by not opening any ports
except those you absolutely need in the first place. What ports are open
on your system? Do you know?