Re: [RT] Security Alert -- new attack bypasses firewalls

["Kent Rollins" <kentr@xxxxxxxxxxxxxx>]

One minor correction: this form of spam cannot bypass firewalls.  This spam
uses port 135 and if a firewall leaves that port open, only then can the
spam get thru.  Most firewalls close all ports by default.

Kent


----- Original Message -----
From: "Mark Jurik" <mark@xxxxxxxxxxxx>
To: "'Omega List'" <Omega-list@xxxxxxxxxx>; "'Realtraders'"
<realtraders@xxxxxxxxxxxxxxx>
Sent: Wednesday, October 23, 2002 3:23 PM
Subject: [RT] Security Alert -- new attack bypasses firewalls

Seems like where there's a profit to be had, there's a way to be found.
This time, a spamming agency is selling software that bypasses firewalls and
pops up messages on a recipient's computer.   Worms and viruses can be
expected to follow suit.  For a report on this security breach, go to ...

http://www.itsecure.com.au/news/story.htm?StoryID=254

One way to block this form of attack is to disable the Messenger Service on
your computer and disable all non-essential communication bindings.  The two
attached pix show settings on my computers.

Regards,
Mark Jurik