Re: Update: Messenger Spam

From: David J. Grabiner (grabiner_at_alumni.princeton.edu)
Date: 09/13/03 

Date: 12 Sep 2003 21:57:05 -0400

"Lawrence Baldwin" <baldwinL@SPAMMENOTmynetwatchman.com> writes:

> I spent a good amount of time updating my documentation the the blasted
> Messenger Spam phenom:
>
> http://www.mynetwatchman.com/kb/security/articles/popupspam/index.htm

Interesting. Microsoft explains how to block these with a firewall, and
which ports to close, but doesn't discuss the obvious step of turning
off Messenger.
 
> Psloss was also good enough to update our WinPopUP tester to include the new
> ports the blasted spammers are jamming these messages to: udp/1026-1029 as a
> result of udp/135 filtering by most ISPs.

And by firewalls; I closed the ports that Microsoft said to close but it
still didn't block all the spam. 

-- 
David Grabiner, grabiner@alumni.princeton.edu, http://remarque.org/~grabiner
Baseball labor negotiations FAQ: http://remarque.org/~grabiner/laborfaq.html
Shop at the Mobius Strip Mall: Always on the same side of the street!
Klein Glassworks, Torus Coffee and Donuts, Projective Airlines, etc.

Relevant Pages

  • Re: NETFW.INF, Preconfigured Firewall settings and dialogs
    ... You can only Add Ports in firewall exclustion ... You can use the document '832017 Port Requirements for the Microsoft ... Windows to find the corresponding port and protocol for the specific ...
    (microsoft.public.windows.server.networking)
  • Re: Windows Firewall Port requirements on Server 2003 SP1 DC
    ... > I am interested in knowing which ports should be enabled on the Domain ... > Controller which is on Server 2003 SP1 EE with Windows Firewall ... please direct all replies ONLY to the Microsoft public newsgroup ...
    (microsoft.public.windows.server.active_directory)
  • Re: Update: Messenger Spam
    ... > Messenger Spam phenom: ... Microsoft explains how to block these with a firewall, ... I closed the ports that Microsoft said to close but it ...
    (microsoft.public.win2000.security)
  • RE: ISA 2004 blocking even when no firewall option chosen
    ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ... | firewall is chosen in CEICW Wizard. ... We have tried opening these ports but ...
    (microsoft.public.windows.server.sbs)
  • RE: Microsoft Windows SBS 2003 Communication Issues
    ... Please add the AutoCAD application to Windows Firewall unblock list to see ... Before you can add a port or ports manually, you have to identify the ports ... Microsoft CSS Online Newsgroup Support ... This newsgroup only focuses on SBS technical issues. ...
    (microsoft.public.windows.server.sbs)