Re: sasser worm

jelantix <[email protected]>
Newsgroups gmane.mail.postfix.user.indonesian
Message-ID <[email protected]>
On Thu, 6 May 2004 14:13:18 +0700
Asfihani <asfik-yNEVPA1OLJZWk0Htik3J/[email protected]> wrote:

> On Tue, May 04, 2004 at 05:09:13PM +0700, Muhammad Reza wrote:
> 
> > http://www.detikinet.com/index.php/detik.read/tahun/2004/bulan/05/tgl/04/time/91918/idnews/155174/idkanal/110
> > 
> > Signature tersebut dikenal oleh clamav sebagai apa yah ?
> 
> Sepertinya tidak menular melalui email :-), tapi melalui network. Coba
> saja firewall nya diperketat terutama pada port-port berikut :
> 
> 445/TCP
> 5554/TCP
> 9996/TCP

begini ?
-A INPUT -p tcp -m multiport --dports 445,5554,9996 -j DROP

regards
-yudhi-
lmpx.com only provides a reader for public news (NNTP) servers. It is not affiliated with the servers or forums shown here and is not responsible for the content of articles, which is written by their respective authors.