Discussion Locked

Sasser and Linux firewalls

0 helpful
2 replies
Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.
We run Windows 2k and XP on most our internal desktops and servers. All of our firewalls and perimeter computers are all Linux/Unix. Can our internal segmant still be infected with the Sasser virus?

2 replies

by sgt_shultz

sasser and its variants do not infect linux or win9x is my understanding. the worm attacks TCP Port 445 which most firewall products (including the built-in firewall in XP) block this port by default.
so to answer your question i think your internal segment is probably safe but nobody can tell but you. if it were my network they would all be getting windows critical updates automatically and i would be spending my time helping my users disinfect their home computers.
this is great opportunity to educate users about social engineering, malicious links spoofed sites etc as so much news coverage...
you need to become at least passingly familiar with how/what worm does in order to be sure you are protected. you can't get by with not understanding imho. subscribe to cert.org or symantec or somebody's security alerts and allocate some time to this from here on out...stop by microsoft website daily to see what is up

This discussion is closed to new replies.