At 15:38 18/09/00 -0400, John Huggins wrote:
>One of our Windows 98 machines ground to a slow pace today. Then we get an
>email from our Internet provider essentially copying a message they received
>from some outside person complaining that this little 98 machine was
>exploring a whole range of IP addresses on the usual Windows network ports.
>
>Any body heard of this kinf of virus? If not, can you provide some other
>resource links to others in the know?
try sniffing packets. It may be as simple as a misconfiguration problem,
or a trojan beast trying to attack the world...
>I know, I know. We should have been packet filtering our local network from
>the Internet, BUT those on high demanded full access to the Internet; For
>all I know they belong to the Flat Earth Society. Thus, I let them have
>their way, while us few non-flat-earthers protect our individual machines
>with things like Zone Alarm.
The problem is that you'r probably responsible for any attack that comes from
these machines, so you _must_ protect 'em not only for their own security but
also for that of other people. If you're worried about performance, you'll
need to
spend much time to watch the machines, but this is badfor your health :)
so grab a packet filter and configure few rules. I'm sure the perf degradation
won't be as important as you think.
regards,
mouss
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
