Re: Would a firewall prevent Sasser worm?
From: Lars M. Hansen (badnews_at_hansenonline.net)
Date: 05/05/04
- Next message: ObiWan: "Re: IPSEC"
- Previous message: David W.E. Roberts: "Re: Self-issued certificates and commercial certificates."
- In reply to: Nigel Wade: "Re: Would a firewall prevent Sasser worm?"
- Next in thread: Bernd Felsche: "Re: Would a firewall prevent Sasser worm?"
- Reply: Bernd Felsche: "Re: Would a firewall prevent Sasser worm?"
- Reply: Nigel Wade: "Re: Would a firewall prevent Sasser worm?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Wed, 05 May 2004 14:16:07 GMT
On Wed, 05 May 2004 14:11:14 +0100, Nigel Wade spoketh
>
>There is no sun-rpc package in RH8 or RH9· Are you sure you've really
>installed them?
>
>If you actually meant the portmap package then that is only required by fam.
>Since fam is monitoring local filesystems there is no need to open port 111
>to anything other than the loopback interface. No vulnerability whatsoever.
>
>You should not equate Linux with Windows. Just because RPC on Windows is a
>security hole does not mean that RPC in Linux is also.
Cut from my /etc/services file on my RH8 box:
sunrpc 111/tcp portmapper # RPC 4.0 portmapper TCP
sunrpc 111/udp portmapper # RPC 4.0 portmapper UDP
You were saying?
As for RPC being an issue on Linux, well, there may not be any known
issues at this time, but there has been in the past, and who knows
what's around the corner...
Lars M. Hansen
www.hansenonline.net
Remove "bad" from my e-mail address to contact me.
"If you try to fail, and succeed, which have you done?"
- Next message: ObiWan: "Re: IPSEC"
- Previous message: David W.E. Roberts: "Re: Self-issued certificates and commercial certificates."
- In reply to: Nigel Wade: "Re: Would a firewall prevent Sasser worm?"
- Next in thread: Bernd Felsche: "Re: Would a firewall prevent Sasser worm?"
- Reply: Bernd Felsche: "Re: Would a firewall prevent Sasser worm?"
- Reply: Nigel Wade: "Re: Would a firewall prevent Sasser worm?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|