Security

Ask something
Discussion Locked

Attack by SMS user to enter 2000 machine

0 helpful
5 replies

by joel_cogan

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
My machine is under attack by IT personel trying to gain access using SMS services. I have tried to bring it up with there managers, but no avail. Is there any way to stop there remote control of indivdual machines?

5 replies

by cybergod

If I get you right if you are using Linux or some kind of UNIX then you should read the logs and find out the IP addresses of the attackers then add them in ipchains firewall to discard the unwanted packets.

by joel_cogan

I was not fully accurate on my system. I am running a 2000 machine, and the attack is from an internal network.

by dlw6

My brief experience with SMS showed that, if it's set up properly, SMS only allows Domain Admins to do that. If these "insiders" aren't in that category, then the entire company network is at risk from their activities.

If you have admin access to your machine, you can stop the SMS service using the Services applet in Control Panel.

You could also close the port (in the Security tab of TCP/IP Properties; I'm sorry I don't know what port SMS uses).

Either of these will stop all inboundSMS traffic.

As for the managers, you might get their attention in a couple of ways. You can have your boss remind them that unauthorized access via a computer network might be a federal crime, depending on the circumstances. You can also estimate the value (in man-hours and/or other forms) of the information on your machine that's at risk if the attackers gain access. Finally, whoever supervises the Domain Admins might be interested to know that someone is trying to do his job, without authorization.

Good fortune,
Don

by joel_cogan

Thank you very much, I am finding rogue IT staff that are trying to play god and let everyone know it.

This discussion is closed to new replies.