Firewall and new sasser worm

Aaron Grewell agrewell
Mon May 17 12:01:57 PDT 2004


> 1. Why would anybody allow port 445 to be exposed on
> the internet?

Port 445 is the CIFS port, which allows file transfers and such without
the need for NetBIOS over IP encapsulation.  MS used to pretend that
this was a safe thing to do, and I don't think everybody's caught up
yet.  I've encountered this on occasion being used as though it were
just another file transfer service by those who didn't know better.

>      Could Comcast be filtering these things out? Seems
>      doubtful, since I got a notice from Comcast telling
>      its MS users to get the newest patch from MS
>      yesterday.

Comcast blocks most of the MS networking ports.  At least 135 and 139
are blocked for me.  I haven't tested 445, but it seems likely they're
blocking that one as well.




More information about the Linux-users mailing list