Re: Would a firewall prevent Sasser worm?

From: Wendel (wendel_at_hadrion.com.br)
Date: 05/04/04 

Date: 4 May 2004 11:21:41 -0700

Hi,

I agree with ObiWan, why use a firewall to filter some port if it can
be exploited in other ways ??

In this case, the "unknow" can be commonly suposed...

Real secure protect the source problem, not workarrounds... ;-)

Fix the overflow at lsass.exe! :)

ps.: A machine up2date today isn't enough.

Regards.

Mercenarie's Club Member => http://cdm.frontthescene.com.br
Front The Scene Team => http://www.frontthescene.com.br
Personal Page => http://ws.frontthescene.com.br

Relevant Pages

  • RE: Possible DoS Attack?
    ... > was compromised they'd have simply turned off the filter, ... system accepts to turn the firewall off? ... wrote regarding RE: Possible DoS Attack?: ... What your firewall dropped was the result of a port ...
    (Incidents)
  • Re: suggestions on router w/firewall
    ... a simple packet filtering firewall should process HTTP ... > is received on port 21 by the same rules that would be used for FTP. ... A simple packet filter type of firewall cannot do that, ...
    (comp.security.firewalls)
  • Re: Would a firewall prevent Sasser worm?
    ... why use a firewall to filter some port if it can ... the "unknow" can be commonly suposed... ...
    (comp.security.misc)
  • Re: Would a firewall prevent Sasser worm?
    ... why use a firewall to filter some port if it can ... the "unknow" can be commonly suposed... ...
    (alt.computer.security)
  • Re: Port 1214 - Is It Used For A Specific Purpose?
    ... Port 1214 - Is It Used For A Specific Purpose? ... > I don't understand why a firewall, upstream on ed1 as you describe it, ... ADSL Modem/Router ... But irregardless of the type of filter, ...
    (FreeBSD-Security)