Windows2003 blockes port 80 outbound?

anonymous_at_discussions.microsoft.com
Date: 03/24/04


Date: Wed, 24 Mar 2004 13:46:03 -0800

its blocked to keep hackers out, a known security hole.
This log is tellign you someone tried to get in. Its not
personal, hackers scan random IP addresses to find a
computer that is easy to break into. Our work computer
gets tcpip port scans, blaster worm attacks, and a couple
of other port probes constantly, almost as fast as you can
watch them go by. The firewall happily reports this and
blocks them.

>-----Original Message-----
>Hi,
>
>I have a log in which it seems that port 80 traffic is
blocked by the
>embeded firewall of Windows 2003 Server.
>
>Can anyone tell me what or why this is happening?
>
>Dennis (oma@kuit.net)
>
>=== log ===
>#Verson: 1.0
>#Software: Microsoft Internet Connection Firewall
>#Time Format: Local
>#Fields: date time action protocol src-ip dst-ip src-port
dst-port size
>tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info
>2004-03-24 19:38:48 OPEN-INBOUND TCP 194.229.206.222
192.168.1.252 1752
>80 - - - - - - - -
>2004-03-24 19:38:48 DROP TCP 192.168.1.252
194.229.206.222 80 1752 40 A
>600110728 1184276436 17680 - - -
>2004-03-24 19:38:48 DROP TCP 192.168.1.252
194.229.206.222 80 1752 40 A
>600110728 1184276436 17680 - - -
>=========
>
>
>.
>



Relevant Pages

  • Re: Strange capture of my eth0 interface.
    ... In article, Doug Laidlaw wrote: ... mit.edu and hackers indeed! ... Those commands would identify the process that is using port 32771. ... Then it sounds as if you may want to review those firewall rules. ...
    (comp.os.linux.security)
  • Re: Everyone knows all my user account
    ... I do not install a firewall, could you tell me how to ... block the directory use port. ... >> begin a lot of hackers. ... >> user account, and hackers use all the correct user ...
    (microsoft.public.windows.server.active_directory)
  • Re: keeping ports open
    ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
    (microsoft.public.security)
  • Re: How to Maintain an IIS Server?
    ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
    (microsoft.public.inetserver.iis.security)
  • Re: CEICW fails at firewall config
    ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
    (microsoft.public.windows.server.sbs)