Slashdot Mirror

← Back to Stories (view on slashdot.org)

Preventing the NT Messenger From Use as a Spam Portal?

Posted by Cliff on from the increasing-the-signal-to-noise-ratio dept.

zbowling (Zac Bowling) asks: "I currently use Comcast cable internet, and I consistently get hit with spam popups. These are not the ones you get from a webpages or media, these are dialog box popups from people scanning all possible IPs for the open messenger port on most NT or Win2k machines. The NT Messenger service (also the same as Novells Network Alert system) is reserved for admins, so they can send messages to the domain or a single workstation for any reason. This service has been taken advantage of by spammers looking for a cheap way to spam someone. One message I got was a spam to get me to buy a firewall product from them to prevent this from happening. I'm sure you can shut of that service or block that port except from people in your subnet. Does anyone know of any resources on the topic?"

3 of 66 comments (clear)

  1. Spammed by anti-spam product adverts. Defeat? by tgrotvedt · · Score: 4, Funny

    Maybe you could, uh, buy that firewall product the spammer advertised....

    that's kind of... weird though.

    --
    What makes a man want to be a mouse? (Python's Flying Circus)
  2. Stopping NT Messenger Spam by Wrexen · · Score: 4, Funny

    Step 1) Go to google
    Step 2) Type in "NT messenger spam"
    Step 3) Hit the "I'm feeling lucky" button
    Step 4) Stop NT Messenger Spam
    Step 5) Submit question to "Ask Slashdot" anyway
    Step 6) ????
    Step 7) Profit!

  3. Simple by Anonymous Coward · · Score: 4, Funny

    Create a whitelist of IPs and generate a set of rules for INPUT tabl... oh... sorry, never mind...