Re: Incoming port accesses from China



Jeff B wrote:
> Windows users need to be paranoid on the use of 135-139,445 from the
> web. These ports are used heavily in a LAN environment for File/Print
> sharing amongst other things. The default freebe firewall and/or SP2
> will automatically close these ports, but if you need sharing, then be
> sure to enable them ONLY on your private, non-routable lan addresses.
> There are many trojans that use these ports to really mess with your life.

Thanks, I've seen those ports quite often when googling around. I got
135 & 445 blocked, and will block 135-139 if I run into any problems
that I find are related to them.
.



Relevant Pages

  • Re: iptables configuration
    ... >> that if a 'virus/trojan' initiated a connection to the net, the firewall ... >> would not protect the LAN. ... The LAN is NATed with private IPs to one public IP. ... the ports that are used by services running on linux. ...
    (comp.os.linux.security)
  • alg.exe
    ... ich habe ein kleines LAN mit Router, ... Ports habe ich mir leider nicht notiert (meine aber, vierstellig, evtl. ... Gegenstelle war natürlich eine WAN-Adresse (also ... 'Application Layer Gateway Service' und womit muß ich jetzt rechnen? ...
    (microsoft.public.de.security.netzwerk.sicherheit)
  • alg.exe
    ... ich habe ein kleines LAN mit Router, ... Ports habe ich mir leider nicht notiert (meine aber, vierstellig, evtl. ... Gegenstelle war natürlich eine WAN-Adresse (also ... 'Application Layer Gateway Service' und womit muß ich jetzt rechnen? ...
    (microsoft.public.de.security.heimanwender)
  • Re: Exchange problems After changing FireWall Harware
    ... For a MS discussion of the ports needed for SBS and RWW, ... using any device on your LAN as a web server. ... DNS and DHCP on the server. ... I can't send mails to Internet by OWA ...
    (microsoft.public.windows.server.sbs)
  • Re: Suggestions for Firewall/Port selection hardware box
    ... > I have a small LAN that currently sits behind a NAT connected to a DSL ... > mail server ports, web hosting port and several "custom" ports for my ... > have a DMZ port - but I do not think that this allows me to control the ... forward host is still connected to your internal LAN, ...
    (comp.security.firewalls)

Quantcast