> > I had something unnerving happen yesterday. Our web 
> > server had a pop up dialog box open on it after logging 
> > in. The dialog was an advertisement for call center and 
> > a 1-800 number!  It did not originate internally.
> >
> > Is this a SMNP, or messenging service problem? What do I 
> > need to disable and how potentially hazardous is this??
>
> That's coming from the Windows Messenger service. Here's more 
> info:
> 
> http://www.auburn.edu/oit/security/messengerService.html

The link Howie posted is a good description of the problem. As it states,
you can disable the Messenger service to prevent this. Or, you can just
click "OK" and ignore it, frankly - it can't really do anything to the
machine.

However, what the link doesn't mention is that, ideally, you shouldn't
expose Windows Networking functionality to the public internet - that is, no
one outside your LAN or WAN should be able to send messages, or map drives,
and so on. You should block Windows Networking traffic at your firewall
and/or gateway router. If you can't do that, you should use Windows' TCP/IP
security and filtering functionality to limit allowed inbound (and outbound,
if you're using Windows 2000) traffic.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444

______________________________________________________________________
Structure your ColdFusion code with Fusebox. Get the official book at 
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with 
'unsubscribe' in the body or visit the list page at www.houseoffusion.com

Reply via email to