Re: Would a firewall prevent Sasser worm?

phn_at_icke-reklam.ipsec.nu
Date: 05/04/04 

Date: Tue, 4 May 2004 18:07:15 +0000 (UTC)

In comp.security.misc Bill Unruh <unruh@string.physics.ubc.ca> wrote:
> Lars M. Hansen <badnews@hansenonline.net> writes:

> ]On Tue, 04 May 2004 08:33:32 GMT, Piotr Makley spoketh

> ]>If I had a firewall would that prevent the Sasser worm infecting my
> ]>PC?
> ]>
> ]>I mean, if another infected system cannot see my ports because they
> ]>are stealthed then presumably Sasser could not infect me?

> ]Yes, any firewall that blocks incoming port 445 will prevent infection
> ]by the Sasser worm.

> Why is port 445 open on his system in the first place?

Becouse microsoft has it enabled and vulnerable by default. 

-- 
Peter Håkanson         
        IPSec  Sverige      ( At Gothenburg Riverside )
           Sorry about my e-mail address, but i'm trying to keep spam out,
	   remove "icke-reklam" if you feel for mailing me. Thanx.

Relevant Pages