Blocking port 135?
Stephen Sprunk
stephen at sprunk.org
Fri Aug 1 19:02:21 UTC 2003
Thus spake "Adi Linden" <adil at adis.on.ca>
> http://www.cert.org/advisories/CA-2003-19.html
>
> Would blocking port 135 at the network edge be a prudent preventative
> measure?
If you see your job as protecting users from their own ignorance, blocking
135-139 both tcp and udp has been prudent for nearly a decade. However, not
all providers share that view.
S
Stephen Sprunk "God does not play dice." --Albert Einstein
CCIE #3723 "God is an inveterate gambler, and He throws the
K5SSS dice at every possible opportunity." --Stephen Hawking
More information about the NANOG
mailing list