Port 135

Discussion in 'LnS English Forum' started by hotrod55, Aug 14, 2003.

Thread Status:
Not open for further replies.
  1. hotrod55

    hotrod55 Registered Member

    Joined:
    Aug 14, 2003
    Posts:
    2
    How can I create a rule in version 2.04 that will block any traffic through port 135, the one that was exploited by the Blaster worm.
     
  2. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Though it’s irreverent to your Question, you using Look ‘n’ Stop v2.04 or v2.04p2?

    In EnhancedRulesSet.rls you’ll see “TCP : Block WinNuke” rule, just export that and import it back in-to the rule-set and place it below “TCP : Block incoming connections” rule and make modification to the rule-name, description and the source port (139), just change it to 135….

    Though if you using EnhancedRulesSet.rls (one of Look ‘n’ Stop’s Default rule-sets) and you have TCP SPI Activated, then you shouldn’t need that additional rule. “TCP : Block incoming connections” rule should block the Connection attempts onto ALL your TCP ports (0-65534), unless you added additional inefficient rule or rules to the rule-set… ;)
     
  3. hotrod55

    hotrod55 Registered Member

    Joined:
    Aug 14, 2003
    Posts:
    2
    I think I'm using 2.04, not the p2 version, whatever that is.
     
  4. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,684
    Location:
    Canada
    Hey hotrod55

    Visit http://www.wilderssecurity.info/pg.shtml :D
     
  5. FireDancer

    FireDancer Registered Member

    Joined:
    Jul 24, 2003
    Posts:
    316
    What the HE** is the little guy with the sign and the ip addresso_O rofl

    FireDancer
     
  6. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
    http://www.wilderssecurity.com/showthread.php?t=12527;start=0#msg80547
     
  7. FireDancer

    FireDancer Registered Member

    Joined:
    Jul 24, 2003
    Posts:
    316
    I want one of those :) hehehehe
     
Thread Status:
Not open for further replies.