[Dshield] re: disabling messenger

S. Wolff ip-arp at swbell.net
Mon Oct 20 15:31:31 GMT 2003

-----Original Message-----
From: Doug White <doug at clickdoug.com>
To: General DShield Discussion List <list at dshield.org>
Date: Saturday, October 18, 2003 10:00 PM
Subject: Re: [Dshield] re: disabling messenger

>DCOM and messenger are disabled on all Windows servers, thank you.
>The SQL database server uses unique ports and not the default ones.
>Patches are up to date.
>All unused services are disabled or even not installed in the first place.
>What have I missed?

Applies to Win workstations as well, then look at appling SpyBot S&D w/
downloaded updates, run on a schedule (on workstations anyway - haven't
tried SpyBot on servers).

On workstations - add a good AV  w/ personal firewall, a malicious Java &
ActiveX blocker & daily updates  (at a mininum), set firewall to block all
incoming ports (except allow netbios on the local subnet if your sharing
something, ie. printer).  If you use a net messenger service (MSN, IM, IRC,
etc.) - your on your own!! (for allowing inbound port services - anyway).

WAIT - I'm getting off the subject and you know all this anyway - sorry -
applies to Win workstations also is



>Stop spam on your domain, use our gateway!
>For hosting solutions http://www.clickdoug.com
>Featuring Win2003 Enterprise, RedHat Linux, CFMX 6.1 and all databases.
>Suggested corporate Anti-virus policy: http://www.dshield.org/antivirus.pdf
>If you are not satisfied with my service, my job isn't done!
>----- Original Message -----
>From: "S. Wolff" <ip-arp at swbell.net>
>To: <list at dshield.org>
>Sent: Saturday, October 18, 2003 1:44 PM
>Subject: [Dshield] re: disabling messenger
>| Have a look at www.grc.com "Shoot The Messenger"
>| SW
>| _______________________________________________
>| list mailing list
>| list at dshield.org
>| To change your subscription options (or unsubscribe), see:

More information about the list mailing list