OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
 
From: Ed Sunder (edsunder_at_3hd.com)
Date: Wed Jan 22 2003 - 09:41:21 CST

  • Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]

    Okay, I haven't found a good answer to this online and would appreciate
    any advice this group has... Our servers are being deluged with Admin
    Alert Spam's. At a certain point, particularly over a weekend, with no
    one actively looking at the machine, if there are enough messages it can
    cause some services to shut down. I read that blocking ports 137-139
    would stop these messages, but I did that in our firewall and yet the
    messages still came.

    I'm wondering:
    1) If I disable the messenger service on the server, could there be any
    bad ramifications of that, other than potentially not receiving
    legitimate messages about system shutdowns etc.? Also, would that stop
    the problem?
    2) Is there some other way to stop these messages? Are they coming in on
    another port etc.?

    Any help on this would be appreciated.
    Thanks in advance,

    Ed Sunder
    Three HD