It appears to be using UDP on port 135, which according to www.iana.org/assignments/port-numbers is for epmap 135/tcp DCE endpoint resolution epmap 135/udp DCE endpoint resolution Adrian Smith

...

...

...

"Juha Saarinen" 21/08/2002 11:53:38 >>> Gordon Smith wrote: Looks like a copy of an open source tool that was around some time ago. Also has bogus domain registration details, and the address on the site is in spammer paradise (Florida).

I believe that the MS NET SEND command relies on NetBIOS over TCP, so having something like this at the borders should make it a non-issue:

access-list 101 deny tcp any any eq 137 access-list 101 deny tcp any any eq 138 access-list 101 deny tcp any any eq 139

You might have to add TCP and UDP 445 to that list, for Win2K/XP.

- To unsubscribe from nznog, send email to majordomo(a)list.waikato.ac.nz where the body of your message reads: unsubscribe nznog