It's SMB. You should be blocking UDP ports 137 & 138, and TCP ports 139 & 445 into and out of your network...
You can shut the service off (and probably should, if you don't use it), but the scwipt kiddies (or worse...) will be walking all over your filesystems while your SMB ports are open. That's how the ads got in :-/ On Sun, 2002-10-13 at 00:57, isp wrote: > Over the last coule of days, I've seen "Windows" (ie. not web) pop ups on a > couple of > machines - "Windows Messenger Popups", I believe, with some ad in it. I > don't know > if it is similar to IM with a pop up message. > > Would this be coming via the "Messenger" service, and if so, can I safely > shut that service off? > Is it commonly used by the systems? > > Thanks > > > ____________ The ISP-SECURITY Discussion List ____________ > To Join: mailto:[EMAIL PROTECTED] > To Remove: mailto:[EMAIL PROTECTED] > Archives: http://isp-lists.isp-planet.com/isp-security/archives/ > To Remove: mailto:%%email.unsub%% > -- Cheers, Mattt. icq : 117539757 aboveNetworks www : www.above.nq4u.net [EMAIL PROTECTED] jabber: [EMAIL PROTECTED] What's got four legs and an arm? A happy Pit Bull... ____________ The ISP-SECURITY Discussion List ____________ To Join: mailto:[EMAIL PROTECTED] To Remove: mailto:[EMAIL PROTECTED] Archives: http://isp-lists.isp-planet.com/isp-security/archives/ To Remove: mailto:[EMAIL PROTECTED]
