Twinkletoes
10-08-2003, 12:42 PM
A month or so ago Kerio sent out a newsletter which contained the following:
Kerio Personal Firewall 2.1 stops Blaster worm
================================
Microsoft recently listed Kerio Personal Firewall among the firewalls
recommended to prevent the spread of the Blaster worm. To prevent a
system infected with the worm from connecting to your PC, install Kerio
Personal Firewall and add the following rule using the advanced
administration option:
Under Protocol, select "TCP". Under Direction, select "Incoming". For
Local Endpoint, choose port 135 for "Any Application". For Remote
Endpoint, choose "Any" address and "Any" port. The rule should always be
valid. Set Action to "Deny".
I have ADSL, and being an obedient fellow I followed the above recommendation only to discover from the Firewall Log that since then my ISP has been and still is sending TCP packets to Port 135 (which Kerio has blocked) at sometimes 30 second, sometimes 2 minute intervals ever since.
Is this normal ? (I have reported it to my ISP's abuse department - "contact by email only" - but no reply is forthcoming.)
TT
Kerio Personal Firewall 2.1 stops Blaster worm
================================
Microsoft recently listed Kerio Personal Firewall among the firewalls
recommended to prevent the spread of the Blaster worm. To prevent a
system infected with the worm from connecting to your PC, install Kerio
Personal Firewall and add the following rule using the advanced
administration option:
Under Protocol, select "TCP". Under Direction, select "Incoming". For
Local Endpoint, choose port 135 for "Any Application". For Remote
Endpoint, choose "Any" address and "Any" port. The rule should always be
valid. Set Action to "Deny".
I have ADSL, and being an obedient fellow I followed the above recommendation only to discover from the Firewall Log that since then my ISP has been and still is sending TCP packets to Port 135 (which Kerio has blocked) at sometimes 30 second, sometimes 2 minute intervals ever since.
Is this normal ? (I have reported it to my ISP's abuse department - "contact by email only" - but no reply is forthcoming.)
TT