opkpick.blogg.se

Is this "Stealth" necessary to address this potential DNS virus attack?

Its a Windows 2003 Enterprise DNS (primary) server all current with security updates as of this Feb 8, 2011. I know there is a lot of material on the subject and its all MIXED UP on what is what. I have now updated all my machines and its something I would like to address because TCPVIEW is less usable here and I am not sure whether its a performance hit or not. Got the idea that its a MS immediate "stealth" solution for some DNS DoS virus.

I had seen it late year I believe after a 2003 update and I would swear I downloaded a hotfix to make it go away, but that is not what I saw. Using sysinternal''s TCPVIEW, I am seeing excessive DNS UDP port allocations.