WANNACRY block port from Router(直接叫router 封)

skywolf08

Netgear
https://kb.netgear.com/24054/How ... enie-user-interface
Link Sys
http://www.linksys.com/ph/support-article?articleNum=136710
Asus:
http://www.noip.com/support/know ... g-on-asus-rc-ac66u/


其他router: 自己login 睇menu.

最好在router直接block  TCP/UDP: 445, 135-139,
當然在windows firewall/antivirus/internet security, 一樣加多inbound rules (block ports) 445, 135-139 ( 要2條.. 1. tcp 2. udp)

If you use network services(for company) (e.g. NAS, plex, network printer, server), You should be consider what port to shut down(without disturbing others.  Do not make them complain about they cannot access the server.)  (If you only have 1-2 computers at home and no files sharing, just shut the ports)

If you block 445, 135-139, you may not use any network printer, server, nas sharing.  (The good thing is you can stop the worm spreading in your intranet)

cckwan

如果公司係 PCCW modem -> PCCW Juniper router -> 2部router (CISCO and Tenda)
咁我係咪要入PCCW個ROUTER BLOCK PORT?

skywolf08

Is all internet connect from PCCW juniper router,(and cisco/tenda)?
If you cannot access the pccw router, then block from cisco and tenda.

slt

我件老爺 router 無得封，我只好 forward 佢去 192.168.2.250:44300 之類，無電腦用緊的 ip 和 port

via HKEPC Reader for Android

skywolf08

Then buy a new router!!!

cheongt

咁華碩router又點封port,thx

fyhmps

想請教一下，喺無 set DMZ 主機或者 NAT 情況下

Default 唔係乜 port 都 block 晒既咩??

skywolf08

Default 唔係乜 port 都 block 晒既咩?? YEs
The intranet still work even if you you did not set dmz.
If someone spread the cold in the office, then it is another issue.

chue

有用,晚D 照住 MENU 加