[Dshield] port 445 problem
rick at jaray.net
Wed Mar 12 01:12:59 GMT 2003
well if someone was using a irc prog or installed some malware on a local..
then the possiblities are high that that system, plus any others you have
behind your firewall, have become compromised. Check out:
> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Eng. Ahed M. Okasha
> Sent: Tuesday, March 11, 2003 1:11 PM
> To: 'General DShield Discussion List'
> Subject: [Dshield] port 445 problem
> I got a weird situation, my Main Router has an Access List that
> Already denies specific ports (including 445 TCP/UDP), and my
> IDS shows that someone is scanning (or trying to attack) port 445 on
> specific machines.
> How is this possible?
> Main Router ---> IDS ---> Machine's
> This is a test environment.
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
More information about the list