Latexxx
Dec 28 2003, 03:12
My firewall has blocked about 3000 attemps to connect to my pc just in 11 minutes. Is there a new virus spreading or is somebody trying to take over my pc?
Latexxx
Dec 28 2003, 04:12
Interesting. It has stopped now.
It may be. Due to the CERT Poland:
http://www.cert.pl/index2.html?action=show...ws_more&nid=487there is last time big activity on the 445tcp port. Maybe Blaster2 is incoming?
ScorLibran
Dec 29 2003, 04:29
(Nie mówię po polsku.)

But I'll try checking the English language CERT website shortly.
I've checked my Norton Personal Firewall regularly since I installed it last week, and I've had 0 intrusion attempts. It's blocked a lot of web content, but hasn't detected anyone trying to "push their way in".....yet. I'll watch it even closer now.
QUOTE(ScorLibran @ Dec 29 2003, 02:29 AM)
(Nie mówię po polsku.)

But I'll try checking the English language CERT website shortly.

Yeah sorry but I had only a link to the info in my native language. But most important is a graph, which shows bigger activity on this port than usually.
Andavari
Dec 29 2003, 10:23
You need to block some ports, not all firewalls are pre-set to block certain ports.
Block Incoming Common Ports - TCP and UDP:
21,22,23,25,42,53,67,68,69,79,80,98,110,113,135,137,139,143,389,443,500,1002,1024-1030,1720,1900,5000,8080
Block Incoming Trojan Horse Ports - TCP and UDP:
1-79,5500-65535,12345,12346,12456,20034,31337,54320,54321
Block Incoming and Outgoing RPC (Remote Procedure Call) - TCP and UDP:
135,139,445,4444
Blaster? Not again. Well, when my avaluation version of windows 2003 (PL B)) expires I change to linux.
p.s.
ok, ok, it's not really on topic, but this is off topic forum after all, and I have to test my new settings somewhere

p.p.s
edit:grammar
Latexxx
Dec 30 2003, 14:27
QUOTE(yq @ Dec 30 2003, 09:50 PM)
avaluation version of windows 2003 (PL B)) expires I change to linux.
I also have one

. It just isn't installed currently.