Re: Port 3128

From: NeoSadist (neos@dist)
Date: 10/31/02 

From: "NeoSadist" <neos@dist>
Date: Thu, 31 Oct 2002 12:02:02 -0700

"Daniel Angelucci" <angelucc@nospam.duke.edu> wrote in message
news:3DC175F8.8000509@nospam.duke.edu...
> Firewall is your best bet, but if you are a masochist and are extremely
> cheap, you can use IPSec to do this. Get a firewall.
>
> Dan
>
> Anthony wrote:
> > Is there a way to close port 3128 to prevent someone from
> > the outside accessing it? I recently had someone using
> > that port to send out Spam. My provider called me. Do I
> > need a firewall app to do it or is there some other way? I
> > am using Win Route on the machine I have for a small
> > business. Any help would be greatly appreciated.
> >
> > TIA
>
>

Ignore my last post.
port 3128 Reverse WWW Tunnel Backdoor, RingZero

Those trojans use that port as default. I'd suggest reading the microsoft
bulletin on trojans (tightening down the root directory permissions), or
here's a list of the permissions settings for root directory:

hard drive root permissions:

administrators: full (all boxes checked for allow)
creators owners: full
system: full
everyone: read and execute (and those associated: should be 3 checked boxes
and no deny boxes)

Relevant Pages

  • Re: FC 5 Firewall Question
    ... confused by the firewall setup. ... The boxes you speak of are most likely associated with a port for a ... access to a particular port and thus the service running behind it. ... connection initiating traffic to connect to your computer. ...
    (linux.redhat)
  • RE: win xppro
    ... This behavior can occur if are using a computer that is behind a firewall, ... click Permissions. ... that no check boxes are selected in the Deny column. ...
    (microsoft.public.windowsxp.security_admin)
  • Cant access remote sites on port 10000 with WinXP/2K
    ... I am able to access both of them from here on Linux but not on Windows... ... Something in Windows is blocking port 10000. ... I have the Windows firewall turned off in XP, ... The Linux boxes which connect OK are on the same subnet as the Windows ...
    (microsoft.public.win2000.networking)
  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)