Blaster Worm - Rule for Kerio Personal Firewall

PeteC,

Very good catch and if I may add to it as to what the rule might look like.

TCP protocal: Direction: Inbound
Local end point ports: 135
Application: ANY
Remote End Point: ANY/ANY
Rule valid: ALWAYS
Action: DENY

You could set this rule for logging as well to monitor activity on that port by checking your logs. But if you are getting stommped by the blaster it be a bit much logging activity.

Regards,

~FIREDANCER~