Re: Blaster Virus Defense Problem

From: Larry Brasher (a-lbrash_at_microsoft.com)
Date: 08/17/03


Date: Sun, 17 Aug 2003 02:25:13 GMT


Hello,

Advanced TCP/IP Filtering

On Windows 2000 systems, where Internet Connection Firewall (ICF) is not
available, the following steps will help block the affected ports so that
the system can be patched. These steps are based on a modified excerpt from
this article: 309798 HOW TO: Configure TCP/IP Filtering in Windows 2000
http://support.microsoft.com/?id=309798

To configure TCP/IP security on Windows 2000:

1. Select "Network and Dial-up Connections" in the control panel.

2. Right-click the interface you use to access the Internet, and then click
Properties.

3. In the "Components checked are used by this connection" box, click
   Internet Protocol (TCP/IP), and then click Properties.

4. In the Internet Protocol (TCP/IP) Properties dialog box, click
   Advanced.

5. Click the Options tab.

6. Click "TCP/IP filtering", and then click Properties.

7. Select the "Enable TCP/IP Filtering (All adapters)" check box.

8. There are three columns with the following labels:

                TCP Ports
                UDP Ports
                IP Protocols

In each column, you must select the "Permit Only" option.

9. Click OK.

Shane Brasher
MCSE (2000,NT),MCSA, A+
Microsoft Platforms Support
Windows NT/2000 Networking



Relevant Pages

  • Re: TCP/IP Filter
    ... Configure TCP/IP Filtering in Win2K Dial-Up ... Internet Connection ... Microsoft Knowledge Base Article - 309798 recommends to ... the steps in my Dial-Up Connection Properties Networking ...
    (microsoft.public.win2000.security)
  • Re: Blaster - TCP/IP filtering
    ... Advanced TCP/IP Filtering ... On Windows 2000 systems, where Internet Connection Firewall is not ... Another way to prevent Windows XP and Windows 2003 Server systems from ...
    (microsoft.public.win2000.security)
  • RE: Blaster update
    ... Advanced TCP/IP Filtering ... On Windows 2000 systems, where Internet Connection Firewall is not ... Another way to prevent Windows XP and Windows 2003 Server systems from ...
    (microsoft.public.win2000.security)
  • Re: Packet Filtering on XP
    ... TCP/IP Filtering ... Windows XP - Shell/User ... > Dear Newsgroup, ... > Please could you advise how I can enable/configure packet ...
    (microsoft.public.windowsxp.security_admin)
  • Windows 2003 Packet Filter vs Firewall
    ... Basically which was is best to have?, Windows 2003 TCP/IP Filtering ... Which is more efficent? ... Prev by Date: ...
    (microsoft.public.windows.server.general)