Difficulties in stopping mass advertisement IP directed broadcast popup windows

Difficulties in stopping mass advertisement IP directed broadcast popup windows

[Deshwal Chand]

[-- Attachment #1: Type: text/plain, Size: 177 bytes --]

Hi

We used to receive ip directed popup windows mass messages. I blocked
135,137-39, 445 ports and they stopped. Now they have started to come again.

Any comments!


BR
Chand

[-- Attachment #2: Type: text/html, Size: 741 bytes --]

RE: Difficulties in stopping mass advertisement IP directed broadcast popup windows

[George Vieira]

[-- Attachment #1: Type: text/plain, Size: 482 bytes --]

Stop the messenger service... isn't that easier?

-----Original Message-----
From: Deshwal Chand [mailto:CDD@kampsax.co.in]
Sent: Friday, September 05, 2003 2:47 PM
To: Netfilter (E-mail)
Subject: Difficulties in stopping mass advertisement IP directed broadcast popup windows



Hi 

We used to receive ip directed popup windows mass messages. I blocked 135,137-39, 445 ports and they stopped. Now they have started to come again.

Any comments! 


BR 
Chand 


[-- Attachment #2: Type: text/html, Size: 1319 bytes --]

Re: Difficulties in stopping mass advertisement IP directed broadcast popup windows

[Dharmendra.T]

[-- Attachment #1: Type: text/plain, Size: 755 bytes --]

iptabels logs should give more detail on this, from where it is coming
and where it is going. Based on this u may take some action.

Regards
Dharmendra T.

On Fri, 2003-09-05 at 10:16, Deshwal Chand wrote:

    Hi
    
    We used to receive ip directed popup windows mass messages. I
    blocked 135,137-39, 445 ports and they stopped. Now they have
    started to come again.
    
    Any comments!
    
    
    BR
    Chand

-- 
Regards
Dharmendra.T
dharmu@nsecure.net

This message is intended for the addressee only. It may contain
privileged or Confidential information. If you have received this
message in error,please notify the sender and destroy the message
immediately.Unauthorised use or reproduction of this message is strictly
prohibited.

[-- Attachment #2: Type: text/html, Size: 1820 bytes --]

Re: Difficulties in stopping mass advertisement IP directed broadcast popup windows

[Chris Brenton]

Deshwal Chand wrote:
> 
> We used to receive ip directed popup windows mass messages. I blocked 
> 135,137-39, 445 ports and they stopped. Now they have started to come again.

Check your Windoze boxes, you'll see they are listening on one or more 
ports in the TCP/1024 - TCP/1027 range as well. These ports can also be 
used to send pop-ups.

As a side note however, it sounds like you are trying to block what you 
are worried about and let everything else through, rather than only 
letting through what you need and blocking everything else. If you had 
taken the latter stance with your perimeter, this would be a mute issue 
as you would not have the ports open anyway.

Just my $.02,
C