Re: Blocking port 135?

[Jason Slagle <raistlin () tacorp net>]

On Fri, 1 Aug 2003, Bruce Pinsky wrote:

> And filtering 445 in the outbound direction to prevent attacks from the inside
> out is probably prudent as well.

Unfortunatly I've ran into at least 1 rather big example of a company
using 445 for SSL since they wanted to put more then 1 cert on a machine.

In this case it was a check clearing house, and a bank couldn't reach them
because their ISP was filtering their T1.

Jason


-- 
Jason Slagle - CCNP - CCDP
/"\ . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .
\ /   ASCII Ribbon Campaign  .
 X  - NO HTML/RTF in e-mail  .
/ \ - NO Word docs in e-mail .