• RSS
  • Twitter
  • FaceBook

Welcome to ISAserver.org

Forums | Register | Login | My Profile | Inbox | RSS RSS icon | My Subscription | My Forums | Address Book | Member List | Search | FAQ | Ticket List | Log Out

Discussion of the Block MyDoom article

Users viewing this topic: none

Logged in as: Guest
  Printable Version
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Discussion of the Block MyDoom article Page: [1]
Login
Message << Older Topic   Newer Topic >>
Discussion of the Block MyDoom article - 4.Jul.2004 3:20:00 AM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
This thread is for discussing the Blocking MyDoom article at http://isaserver.org/articles/2004blockmydoom.html.

Thanks!
Tom

[ July 04, 2004, 03:28 AM: Message edited by: tshinder ]
Post #: 1
RE: Discussion of the Block MyDoom article - 12.Jul.2004 2:55:00 PM   
Guest
Hey Tom.
How can i block MyDoom in ISA 2000?
I can only block one port, not a range of ports!
Best regards from
Ksre Hansen
kare.hansen@kunnskapinord.no
web page

(in reply to tshinder)
  Post #: 2
RE: Discussion of the Block MyDoom article - 12.Jul.2004 4:24:00 PM   
tshinder

 

Posts: 50013
Joined: 10.Jan.2001
From: Texas
Status: offline
Hi Kare,

You'll need to block each one individually.

HTH,
Tom

(in reply to tshinder)
Post #: 3
RE: Discussion of the Block MyDoom article - 17.Feb.2005 5:48:00 PM   
bsockel

 

Posts: 12
Joined: 25.Jan.2005
From: Texas
Status: offline
I have been testing my ISA server and recently added blocking for the MyDoom, SoBig,etc... Anyway ever since i added these rules i have notice Internet access through the ISA Server has been extremely slow. There is a rule for each entry that i did. I am wondering how ISA handles packet scanning? Does is re-exam the same packet for each rule as the packet is passes through the ISA server?

Would it be more beneficial to setup a single rule say ˘Virus Threat Blocking÷ and add all the user defined protocols that where setup for each virus/worm?

(in reply to tshinder)
Post #: 4

Page:   [1] << Older Topic    Newer Topic >>
All Forums >> [ISA Server 2004 Firewall] >> Access Policies >> Discussion of the Block MyDoom article Page: [1]
Jump to:

New Messages No New Messages
Hot Topic w/ New Messages Hot Topic w/o New Messages
Locked w/ New Messages Locked w/o New Messages
 Post New Thread
 Reply to Message
 Post New Poll
 Submit Vote
 Delete My Own Post
 Delete My Own Thread
 Rate Posts