Re: messenger service

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/31/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Tue, 31 Dec 2002 09:21:40 -0500

I agree. You should be able to safely disable the Messenger service,
however you are permitting NetBIOS traffic to and from your web server,
which could be a potential security risk. I would say it's definitely a
security risk if there's no firewall blocking NetBIOS from the internet to
your web server. Or, if for example there is an IIS vulnerability on your
web server, and there's a firewall between the internet and your web server
but nothing between your web server and your internal network, a hacker
could go through a firewall by sending specially crafted URL requests in
order to touch other computers on your internal network. I'm surprised so
far that the script kiddies aren't doing anything like this yet.

Lists of some free and not-free firewall solutions are at:

http://securityadmin.info/faq.htm#firewall

"Drew Cooper [MS]" <dcoop@online.microsoft.com> wrote in message
news:uqcHhvHsCHA.1776@TK2MSFTNGP10...
> For info about what the Messenger service does, look for "net send" in the
> online help. The documentation there is far better than anything I can
> offer.
>
> To solve your problem, turn off the Messenger service. I have no idea
what
> other software you might have that relies on it, so do it at your own
risk.
> (Messenger service is turned off on my machine with no ill effects.)
>
> For that matter, it's a good idea to turn off any services that you don't
> use. Similarly, run a firewall any only open the ports that you need.
>
> --
> Drew Cooper [MS]
> This posting is provided "AS IS" with no warranties, and confers no
rights.
>
>
> "JC" <no@no.spam> wrote in message
> news:_N7Q9.209$rs4.192582@newsfeed.slurp.net...
> > Hello All,
> >
> > I keep getting messages on my webserver from messenger service
stating
> > the time and my IP address. Is there a way to dispose of this service
> > carefully? What is the purpose of this service? Is it a security risk?
> > Thanks in advance!
> >
> > JC
> >
> >
>
>

Relevant Pages

  • Re: messenger service
    ... You can disable the Messenger service by going to Start->Control ... Hopefully, by disabling ... >> however you are permitting NetBIOS traffic to and from your web server, ... >> order to touch other computers on your internal network. ...
    (microsoft.public.security)
  • Re: Windows 2000 Server Messenger Service
    ... Shut down the Messenger Service ... > external users to message into my web server? ... > TIA. ...
    (microsoft.public.win2000.security)
  • Windows 2000 Server Messenger Service
    ... this new "SPAM" that comes via Messenger Service on to my ... What ports are open on my router that allow ... external users to message into my web server? ...
    (microsoft.public.win2000.security)
  • Re: Messenger Service (not the instant messenger)
    ... It started before I managed to download a firewall, and I logged on to the internet to update norton virus definitions so I guess my computer was a bit vulnerable then. ... The popups come with the header 'Messenger Service'. ... Alternatively, you can upgrade your WinXP to SP2, to install IE's pop-up blocker. ... No software manufacturer can -- nor should they be expected to -- protect the computer user from him/herself. ...
    (microsoft.public.windowsxp.general)
  • Re: Pop Up Error Messages
    ... Do you know where i can download a free ... > use a decent, properly configured firewall. ... > messenger service, as some people recommend, only hides the symptom, ... > ignoring or just "putting up with" the security gap represented by ...
    (microsoft.public.windowsxp.general)