[cobalt-security] Re: Qube 3 and the Latest Wave of Viruses

[Bruce Timberlake <bruce@xxxxxxxxxx>]

> What surprised both of us is the Qube 3 had to be getting hammered like
> this too but "took a lickin' and kept on tickin' " so to speak. What was
> the Qube 3 doing to ignore/absorb this traffic that is overwhelming the
> memory in this Cisco 1605R ?

Were you running the Adaptive Firewall on the Qube? It can do the auto-port 
scan blocking, etc, that would quickly shut off IPs that were doing that sort 
of activity.

Also, as others have mentioned, if you are not listening on port 135, a lot of 
the worm/virus traffic will just get rejected outright.