[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
RE: [cobalt-security] Re: Qube 3 and the Latest Wave of Viruses
- Subject: RE: [cobalt-security] Re: Qube 3 and the Latest Wave of Viruses
- From: "Chuck Lewis" <clewis@xxxxxxxxxx>
- Date: Fri, 3 Oct 2003 08:13:02 -0500
- List-id: Mailing list for users to address network security on Cobalt products. <cobalt-security.list.cobalt.com>
>Were you running the Adaptive Firewall on the Qube? It can do the
>auto-port
>scan blocking, etc, that would quickly shut off IPs that were doing that
>sort of activity.
>Also, as others have mentioned, if you are not listening on port 135, a
>lot >of the worm/virus traffic will just get rejected outright.
Yes we were Bruce (thanks to Gerald) and that explains it. It has been
determined that it is internal source so the hunt begins...
Thanks !
Chuck