[ILUG] AUTH requests on port 135.

[Rick Moen]

Quoting Liam Bedford (lbedford at lbedford.org):

> unless I'm going insane, 135 isn't auth. It isn't listed in
> /etc/services on my machine at all.

MS-Windows portmapper, made infamous by a recent MS-Windows Blaster worm
that made many of the more clueful victims belatedly wake up and say
"What?  Why am I running a portmapper exposed to the global Internet _by
default_?  On a standalone workstation?"

On any rationally designed operating system, you'd know what network
services you were advertising to the world, and you were running them,
how to shut them off, and what if anything would break if you did so.
Moreoever, they would default to binding only to localhost, out of
conservatism.  Sadly, users of NT/W2k/XP have serious problems in that
area, and tend to fall back on feeble remedies like that ICF thing.

I suggest using Linux, instead.  ;->

It's not surprising that dcom-scm aka Endpoint Mapper isn't listed in
/etc/services as such:  Microsoft seldom bothers with the necessary IETF
coordination.

-- 
Cheers,               No trees were destroyed in the sending of this message. 
Rick Moen             We do concede, though, that a large number of electrons 
rick at linuxmafia.com   were terribly inconvenienced.