this attack is still strong here..

Sat Jan 25 08:55:32 UTC 2003



jamesc at gbr1.oct> show firewall filter proactive-filter
Name						Bytes			Packets
mssql-drops                                     916252204              2267951


        term NO-MSSQL {
            from {
                packet-length 404;
                protocol udp;
                destination-port 1434;
            }
            then {
                count mssql-drops;
                discard;
            }
        }