Re: account names exposed!

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 03/09/04

  • Next message: susan: "screensaver password protected" 
    Date: Mon, 08 Mar 2004 23:26:13 GMT

    I think you would be better served with a firewall and there are free ones available
    if you do not want to buy one. The other problem I see is your defense strategy. You
    would be much better served by blocking all access in and out and then creating the
    authorized exceptions instead of blocking certain ports. Go to
    http://scan.sygatetech.com/ and do a basic scan an I bet you find holes -with 445
    being a major one which is also used for file and print sharing in W2K. See the
    links below for more information.

    http://www.webattack.com/Freeware/security/fwfirewall.shtml
    http://www.microsoft.com/security/protect/
    http://www.robertgraham.com/pubs/firewall-seen.html

    "Calvin Lai" <clai[at]qdata[dot]com> wrote in message
    news:OTgxGlVBEHA.2804@tk2msftngp13.phx.gbl...
    > Hi all,
    >
    > I have a computer w/ IPSec set on 135-139 plus FTP and Terminal Service as
    > blocked (except from a certain users w/ sepcific IP) already. However, I
    > still see a lot of attempts by those intruders from time to time in my even
    > log. The thing that concern me most is that they somehow able to fetch the
    > account names of my computer. Does anyone know where I should go for more
    > info this problem? Thanks a lot.
    >
    > Calvin
    >
    >

  • Next message: susan: "screensaver password protected"

    Relevant Pages

    • Re: How do I block just one port from being listened to on my server
      ... Well I looked through ALL my logs; ... Well I'll be testing that Firewall out that you gave the link to. ... I just don't want it blocking everything by ... Blocking one port isn't the answer. ...
      (microsoft.public.security)
    • [Full-disclosure] Re: Quarantine your infected users spreading malware
      ... On Monday 20 February 2006 22:40, Gadi Evron wrote: ... "don't be the Internet's Firewall") are blocking ... ports such as 139 and 445 for a long time now, ...
      (Full-Disclosure)
    • Re: Firewalls and ephemeral ports
      ... > firewall is seeing ACK's coming back toward us with the same destination ... > address, but different sending port numbers, and is blocking them. ... UDP or TCP? ... >> ephemeral ports. ...
      (microsoft.public.win32.programmer.networks)
    • Re: Blocking Yahoo Messenger With Firewall??
      ... >wanting to sell a subscription service to go with the firewall. ... blocking unneeded access to sites (using a proxy ... server can help here), ... everything - try connecting to any computer in your company on port 70 ...
      (alt.computer.security)
    • Re: Blocking Instant Messengers
      ... Search google for "msn aim tcp port block" Blocking the necessary ports ... on our domain used by internal clients to access the internet, ... Actually, if you're asking this question, I'm assuming your firewall may not ...
      (comp.security.firewalls)