Re: windows services

From: Alan Illeman (illemann_at_surfbest.net)
Date: 04/09/04 

Date: Fri, 9 Apr 2004 07:48:45 -0400

"Skywise" <into@oblivion.nothing.com> wrote in message
news:ZCsdc.3034$A_4.3006@newsread1.news.pas.earthlink.net...
> Kerodo <kerodo~nospam~kenny@hotmail.com> wrote in
> news:Xns94C59F095923Ekerodonospamkenny@68.6.19.6:
>
> > Skywise <into@oblivion.nothing.com> wrote in
> > news:mUhdc.1980$A_4.1231@newsread1.news.pas.earthlink.net:
> >
> >>
> >> Ok, I could be wrong as I'm still learning, but if I have the
> >> messnger service disabled and not running, it wouldn't matter
> >> what port the messages come in on as there's no messenger service
> >> to respond to the packet anyway, right?
> >>
> >
> > You should probably leave the messenger service on (automatic) until
> > you're sure nothing is getting in thru the firewall. You don't want
> > inbound stuff getting thru. If you're still getting messenger popups
> > then that's a good alert to you that something IS still getting thru
> > somehow. Ideally, you want nothing coming thru inbound that you don't
> > specifically allow, such as DNS or DHCP.
> >
>
> Oh, nothing is getting through. Kerio is blocking them.
>
> Later when I installed Ethereal I could see the messenger
> packets in the capture. Apparently Ethereal get's the data
> before it goes to the firewall to be blocked. I still did
> not get any messenger pop-ups.
>
> Now messenger is completely disabled and I have added the
> specific ports (135,137-139,445) to Kerio.
>
> Brian

I've also added (to packet filter)
Application: system
Protocol: TCP
Direction: Incoming
Action: Deny

If you 'Log to Network Log' you'll be surprised how many
apparent attacks there are!

Relevant Pages

  • Re: Application Popup Messenger Service SPAM
    ... NO NO NO. Use a firewall. ... It is not a bad idea to also disable the Messenger service, ... Messenger Service pop-ups] on my computer? ... Using a firewall and disabling NetBIOS is still strongly recommended. ...
    (microsoft.public.win2000.security)
  • Re: Re: Help loggin onto messanger
    ... That won't matter, the Windows XP firewall only blocks incoming connections, not outgoing ... Microsoft MVP - Windows Messenger/MSN Messenger ... All posts unless otherwise specified are 2005 Jonathan Kay. ... If your password information is not saved, verify that you are ...
    (microsoft.public.windowsxp.messenger)
  • Re: Connection Conflicts.
    ... Up until around August or around there my Yahoo Messenger worked fine but stopped when I tried to upgrade to the next messenger. ... Joe, Thanks for the input but it didn't work. ... Try disabling the firewall. ... Click Start, Run, type SFC /SCANNOW, click OK. ...
    (microsoft.public.windowsxp.general)
  • Re: POP-UPS!!
    ... > are related to this topic strongly advocates the need for a firewall. ... > I was referring strictly to the topic of the Messenger Service. ... Firewall and disable the Messenger Service in Windows XP to help protect ... I have no problem with people disabling messenger if they don't need it on ...
    (microsoft.public.windowsxp.security_admin)
  • Re: MSN Messenger 7.5 not working
    ... > at least until you can restore your normal Messenger functionality: ... If your password information is not saved, verify that you are typing ... If you use a firewall (like ZoneAlarm, Norton Internet Security ...
    (microsoft.public.windowsxp.messenger)
Loading