Security Basics mailing list archives

RE: Windows Messenger Pop-up spam


From: Steven Trewick <STrewick () joplings co uk>
Date: Tue, 30 Nov 2004 17:00:09 -0000


I think that *most* major ISP's have now blocked ports 
135-139 and 445; inbound and outbound. 

For some local value of "most", I'm sure yours will differ from mine, 
since I use perhaps *the* largest ISP in my country (UK), and I
still get plenty of traffic on those ports.  Nor would I have it 
any other way, in fact should my ISP choose to block ports without
my permission I would be screaming about breach of contract.


This is probably why there has been less windows messenger popups. 

Define "less".  Do you mean "users have seen less" or "spammers
have sent less" ?  I havent been counting them of late, but the
number that turn up at my LAN border are still significant
(or would be, if I was letting them through) 

I don't have a defintion for "significant", either ;-)
, but I can firm this up if needs be.


Some people may have also gone into "services" and
disabled the messenger service. 

Which will merely have lulled them into a false sense of security,
since the traffic is still making it to their IP stack. For windows
boxen, this is almost as good as "game over"










































The information contained in this e-mail is confidential and may be privileged, it is intended for the addressee only. 
If you have received this e-mail in error please delete it from your system. The statements and opinions expressed in 
this message are those of the author and do not necessarily reflect those of the company. Whilst Joplings Group 
operates an e-mail anti-virus program it does not accept responsibility for any damage whatsoever that is caused by 
viruses being passed.
joplings.co.uk


Current thread: