Re: Would a firewall prevent Sasser worm?
Date: Tue, 4 May 2004 18:07:15 +0000 (UTC)
In comp.security.misc Bill Unruh <email@example.com> wrote:
> Lars M. Hansen <firstname.lastname@example.org> writes:
> ]On Tue, 04 May 2004 08:33:32 GMT, Piotr Makley spoketh
> ]>If I had a firewall would that prevent the Sasser worm infecting my
> ]>I mean, if another infected system cannot see my ports because they
> ]>are stealthed then presumably Sasser could not infect me?
> ]Yes, any firewall that blocks incoming port 445 will prevent infection
> ]by the Sasser worm.
> Why is port 445 open on his system in the first place?
Becouse microsoft has it enabled and vulnerable by default.
-- Peter Håkanson IPSec Sverige ( At Gothenburg Riverside ) Sorry about my e-mail address, but i'm trying to keep spam out, remove "icke-reklam" if you feel for mailing me. Thanx.