and this rule blocks these ports almost of every my client. I am affraid of not to block any service needed by my clients. What are that ports needed for? Is better to block them or allow them. Or block almost every client means that almost everybody is infected by messenger worm?
Code: Select all
add chain=virus protocol=udp dst-port=135-139 action=drop comment="Drop Messenger Worm"