[Dshield] Windows Box Need To Filter Outgoing Port 445

Brian Dessent brian at dessent.net
Thu Aug 11 06:53:25 GMT 2005


Nemo Omen wrote:

> Its been a good day for learning new things. I've setup a very small XP
> honeypot and had it compromised after 30 minutes. I've taken it down at the
> moment, but I'd like to put it back online with outgoing port 445 filtered,
> as the honeypot is now scanning on port 445. I am using a dialup connection.
> 
> What is the best Win XP program to filter only outgoing port 445?

How about just installing SP2?

Failing that, you can use ipsec:
<http://support.microsoft.com/?id=813878>

Failing that, any of the tons of software firewalls out there.

Brian


More information about the list mailing list