[Dshield] port 445 problem

Rick Leske rick at jaray.net
Wed Mar 12 01:12:59 GMT 2003


well if someone was using a irc prog or installed some malware on a local..
then the possiblities are high that that system, plus any others you have
behind your firewall, have become compromised.  Check out:
http://www.cert.org/advisories/CA-2003-08.html

~Rick

> -----Original Message-----
> From: list-bounces at dshield.org [mailto:list-bounces at dshield.org]On
> Behalf Of Eng. Ahed M. Okasha
> Sent: Tuesday, March 11, 2003 1:11 PM
> To: 'General DShield Discussion List'
> Subject: [Dshield] port 445 problem
>
>
> Hi,
>
> I got a weird situation, my Main Router has an Access List that
> Already denies specific ports (including 445 TCP/UDP), and my
> IDS shows that someone is scanning (or trying to attack) port 445 on
> specific machines.
> How is this possible?
>
>
> Main Router ---> IDS ---> Machine's
>
> This is a test environment.
>
> Thanks
>
> Ahed.
>
> _______________________________________________
> list mailing list
> list at dshield.org
> To change your subscription options (or unsubscribe), see:
> http://www.dshield.org/mailman/listinfo/list
> ___________________________________________________________________
> Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.
>
>

___________________________________________________________________
Virus Scanned and Filtered by http://www.FamHost.com E-Mail System.



More information about the list mailing list