Karl
Thu May 06 05:38:04 CDT 2004
The firewall should prevent you from being infected by Sasser from the
Internet [although you might be vulnerable to getting Sasser from another
source, such as if you use VPN or RAS to connect to another network that is
infected]. It does this by blocking the inbound TCP 445 connections that
Sasser infected machines use to try to infect you. However, the Sasser
patch fixes a lot of different things. It is still highly recommended that
you install all the latest patches for your machines by visiting
http://windowsupdate.microsoft.com a few times. Relying just on your
firewall to protect you is scary.
Firewall itself is not a complete anti-virus solution, especially when you
consider other viruses besides Sasser. Anti-virus and system patches are
also a very good idea.
"Newbie" <noidea@nospam.com> wrote in message
news:OhzkY60MEHA.2976@TK2MSFTNGP10.phx.gbl...
> Hi,
>
> I have 1 pc running windows 2000 Adv Server and 2 machines running Windows
> 2000 and Windows XP.
> All computers have a virus protection program and all sit behind an ADSL
> Router and a 3com Firewall DMZ with all ports blocked except 25.
>
> Q1. If I DON'T install the latest security updates am I vunerable to
Sasser
> or will the hardware firewall protect me?
>
> Q2. What role exactly does the hardware firewall play in my configuration.
>
> Thanks for any help to clear up this matter in my mind.
>
>