RE: [cobalt-security] Qube 3 and the Latest Wave of Viruses

["Chuck Lewis" <clewis@xxxxxxxxxx>]

>Blaster, Sobig, Welchia, and such "probe" for machines on port 135 - the
>Qube would not natively be listening to that port and would not care (dump
>it all) so yes, that makes sense.  The router is designed to "process"
>traffic, therefore when it started coming its way, it spends a "lot" of
>time trying to firgure out what to do with all the packets that the Qube
>just discarded (routers do not discard packets except by specific
>configuration - their purpose in life is to hand off packets so that is
>what it is trying to do...)(layman's/lay-persons explanation)...

Thanks Larry,

That is GREAT information and makes sense now. We have the firewall on the
Qube 3 set to shutdown pretty much EVERY port except a couple (thanks Gerald
!). So that explains it all. They say this is coming from an internal source
so the hunt begins...

Chuck