RE: Is TCP 135 clamped down?

  • From: "Adrian Willis" <adrianWillis@xxxxxxxxxxxx>
  • To: "[ISAserver.org Discussion List]" <isalist@xxxxxxxxxxxxx>
  • Date: Wed, 20 Aug 2003 08:57:51 +0100

Is this Simon  of light blue Colchester fame?

 

Adrian Willis

Managing Director

Jamie Plc

http://www.JamiePlc.com

Coach House, 49 East Street
Colchester Essex, CO1 2TG
Phone: +44 (0)1206 863633
Fax:     +44 (0)1206 863621

 

 

 

 

  _____  

From: Simon Weaver [mailto:Simon.Weaver@xxxxxxxx] 
Sent: 19 August 2003 22:18
To: [ISAserver.org Discussion List]

 

http://www.ISAserver.org

Dave

I ran the scan and it came back with STEALTH - as if there was no real
way to say TCP135 was Open :o)

So how did it get in?

 

Simon Weaver

Technical Consultant

MCSE+Internet / MCSE Windows 2000

Integrated Solutions Corp. Ltd

http://www.iscl.net <http://www.iscl.net/>  

        -----Original Message-----
        From: David V. Dellanno [mailto:ddellanno@xxxxxxxxxx]
        Sent: 19 August 2003 19:51
        To: [ISAserver.org Discussion List]
        Subject: [isalist] RE: Is TCP 135 clamped down?

        http://www.ISAserver.org

        https://grc.com/x/ne.dll?bh0bkyd2 <http://grc.com> 

         

        ShieldsUP section at the bottom page, Common Ports, All Service
Ports

                -----Original Message-----
                From: Simon Weaver [mailto:Simon.Weaver@xxxxxxxx] 
                Sent: Tuesday, August 19, 2003 4:48 PM
                To: [ISAserver.org Discussion List]
                Subject: [isalist] Is TCP 135 clamped down?

                http://www.ISAserver.org

                Guys

                Just a very quick question! I met a new client that was
infected by teh 2 latest worms going around the streets!

                 

                They are running SBS2k with ISA setup, however the worm
still got into the System.

                 

                Is there a way to prove TCP135 was being protected? I
have now patched the Server, and ALL workstations, as they were all
infected!

                 

                Finally, if the client PC's have the ISA Firewall Client
turned OFF, are they still able to access teh Internet, WITHOUT Firewall
Protection?

                 

                Thanks for your help

                 

                Simon Weaver

                Technical Consultant

                MCSE+Internet / MCSE Windows 2000

                Integrated Solutions Corp. Ltd

                http://www.iscl.net <http://www.iscl.net/>  

                 

                ------------------------------------------------------
                List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
                ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
                ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
                ------------------------------------------------------
                Other Internet Software Marketing Sites:
                Leading Network Software Directory:
http://www.serverfiles.com
                No.1 Exchange Server Resource Site:
http://www.msexchange.org
                Windows Security Resource Site:
http://www.windowsecurity.com/
                Network Security Library: http://www.secinf.net/
                Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
                ------------------------------------------------------
                You are currently subscribed to this ISAserver.org
Discussion List as: ddellanno@xxxxxxxxxx
                To unsubscribe send a blank email to
$subst('Email.Unsub') 

                Confidentiality Notice:
                This e-mail message, including any attachments, is for
the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient,
please contact the sender by reply e-mail and destroy all copies of the
original message. 

        Confidentiality Notice:
        This e-mail message, including any attachments, is for the sole
use of the intended recipient(s) and may contain confidential and
privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient,
please contact the sender by reply e-mail and destroy all copies of the
original message. ------------------------------------------------------
        List Archives:
http://www.webelists.com/cgi/lyris.pl?enter=isalist
        ISA Server Newsletter:
http://www.isaserver.org/pages/newsletter.asp
        ISA Server FAQ:
http://www.isaserver.org/pages/larticle.asp?type=FAQ
        ------------------------------------------------------
        Other Internet Software Marketing Sites:
        Leading Network Software Directory: http://www.serverfiles.com
        No.1 Exchange Server Resource Site: http://www.msexchange.org
        Windows Security Resource Site: http://www.windowsecurity.com/
        Network Security Library: http://www.secinf.net/
        Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
        ------------------------------------------------------
        You are currently subscribed to this ISAserver.org Discussion
List as: Simon.Weaver@xxxxxxxx
        To unsubscribe send a blank email to
$subst('Email.Unsub') 

------------------------------------------------------
List Archives: http://www.webelists.com/cgi/lyris.pl?enter=isalist
ISA Server Newsletter: http://www.isaserver.org/pages/newsletter.asp
ISA Server FAQ: http://www.isaserver.org/pages/larticle.asp?type=FAQ
------------------------------------------------------
Other Internet Software Marketing Sites:
Leading Network Software Directory: http://www.serverfiles.com
No.1 Exchange Server Resource Site: http://www.msexchange.org
Windows Security Resource Site: http://www.windowsecurity.com/
Network Security Library: http://www.secinf.net/
Windows 2000/NT Fax Solutions: http://www.ntfaxfaq.com
------------------------------------------------------
You are currently subscribed to this ISAserver.org Discussion List as:
adrianwillis@xxxxxxxxxxxx
To unsubscribe send a blank email to
$subst('Email.Unsub') 

GIF image

Other related posts: