Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

webpopup, getting on my nerves now

Status
Not open for further replies.
I've heard about this also. I haven't had it happen to me because I am blocking all ports except ones I want with my router. I believe there are two ways people are sending these messages. One is with netbios/SMB, UDP ports 137-139, and TCP port 139 and 445. The other is using RPC, UDP port 135.
Just block these ports from the internet. Or Dissable your messenger service. But you may want to start blocking ports anyways, some may see it as a slight security hole.
 
Easier said than done.

Although our firewall is very secure, we have many links to customer sites as we look after their ERP systems, some are pretty secure and some are not, I have a feeling the message may be coming through one of these links.
 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top