[plug] Has anyone else seen a flurry of Windows probes recently?

[Dion]

Yes I have you can turn off the messenger services and use a software 
wirewall which I convinced the owner to do....as an interim step to 
putting a propper linux box as a firewall between the doze box and the net.

Speaking of which, do any pluggers know what kind of cpu / ram is 
sufficient for a good linux firewall? Only servicing two to three pcs.

cheers.
D

shayne wrote:

>You should be able to turn these off via services or sumfin. Failing that ,
>zonealarm should to
>the trick nicely (Can mangle lan stuff occasionally)
>----- Original Message -----
>From: Dion <tenzero at iinet.net.au>
>To: <plug at plug.linux.org.au>
>Sent: Monday, November 25, 2002 11:21 AM
>Subject: Re: [plug] Has anyone else seen a flurry of Windows probes
>recently?
>
>
>  
>
>>Yes I have seen a lot of this lately too.  I do some work from an
>>unprotected Windows pc and it has experienced a lot of hits from those
>>messenger popups of spam. Usually coming in on UDP 137.
>>
>>D.
>>
>>bob wrote:
>>
>>    
>>
>>>On Mon, 25 Nov 2002 10:36 am, shayne wrote:
>>>
>>>
>>>      
>>>
>>>>I'm pretty sure it's Windows UDP messanger service spam. A highly evil
>>>>thing indeed.
>>>>
>>>>
>>>>        
>>>>
>>>There seems to be an awfull lot of unique IP#s spewing this stuff out.
>>>      
>>>
>I'd
>  
>
>>>assumed it was some win virus/worm and ignored it (droped at firewall
>>>anyway :).
>>>
>>>A quick google seems to point to a link with Bugbear as a source.
>>>
>>>
>>>
>>>      
>>>
>>--
>>"Never ascribe to malice that which may adequately be explained by
>>    
>>
>incompetence." - Napoleon Bonaparte
>  
>
>>
>>    
>>
>
>
>
>  
>

-- 
"Never ascribe to malice that which may adequately be explained by incompetence." - Napoleon Bonaparte