Port 1433 outbound from my Firewall...?
- From: "William Robertson" <robertson.william@xxxxxxxxxxxxxx>
- To: "'[ISAserver.org Discussion List]'" <isalist@xxxxxxxxxxxxx>
- Date: Mon, 4 Oct 2004 15:19:00 +0200
Hi there
I am seeing something strange, and would appreciate some comment on this
please...
I have noticed an ever-increasing amount of UDP:1433 traffic in my Packet
Filter Log, the bugger is that my ISA's external IP Address is shown as the
source address. My semi-conclusion at this stage is that I may have a SQL
Slammer infected server/workstation in my midst, but I would appreciate any
and all analysis of the following excerpt (BTW, the destination IP Address
range varies quite immensely)
10/4/2004, 15:12:08, <ISA Ext NIC>, 5.0.255.19, Udp, 1434, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:16, <ISA Ext NIC>, 0.0.255.19, Udp, 1433, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:16, <ISA Ext NIC>, 0.0.255.19, Udp, 1434, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:19, <ISA Ext NIC>, 0.0.255.19, Udp, 1433, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:19, <ISA Ext NIC>, 0.0.255.19, Udp, 1434, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:21, <ISA Ext NIC>, 0.0.255.19, Udp, 1433, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
10/4/2004, 15:12:21, <ISA Ext NIC>, 0.0.255.19, Udp, 1434, 137, -, BLOCKED,
<ISA Ext NIC>, -, -
Thanks
William R.
Other related posts:
