Pantek Library
Hosting Provided By
CybrHost
High Speed Hosting

RE: Stopping Admin Alert SPAM

From: Jay Lagorio <jay(at)lagorio.net>
Date: Thu Jan 23 2003 - 13:47:29 EST


I blocked port 135 (TCP/UDP) at the firewall...haven't seen another one since.

--Jay Lagorio

http://www.lagorio.net/

-----Original Message-----

    From: "Ed Sunder" <edsunder@3hd.com>     Sent: 1-23-2003 11:45:43 AM
    To: "focus-ms@securityfocus.com" <focus-ms@securityfocus.com>     Subject: Stopping Admin Alert SPAM     

    Okay, I haven't found a good answer to this online and would appreciate     any advice this group has... Our servers are being deluged with Admin     Alert Spam's. At a certain point, particularly over a weekend, with no     one actively looking at the machine, if there are enough messages it can     cause some services to shut down. I read that blocking ports 137-139     would stop these messages, but I did that in our firewall and yet the     messages still came.     

    I'm wondering:

  1. If I disable the messenger service on the server, could there be any bad ramifications of that, other than potentially not receiving legitimate messages about system shutdowns etc.? Also, would that stop
the problem?

This archive was generated by hypermail 2.1.8 : Wed Aug 23 2006 - 14:01:25 EDT


Contact Us  Legal Notices  Order Services Online 
Pantek Home  Privacy Policy  IT news  Site Map  Pantek Library