Network Services Blocks SMB Traffic from Off-Campus

Because of the potential for remote attackers exploiting a vulnerability in Windows NT/2000/XP Server Message Block (SMB) protocol (re: "...More Microsoft Security Loopholes" on page 24), Network Services has installed filters on the UO network that effectively block SMB traffic from off-campus.

Before the block, PC systems that were not adequately secured (e.g., unpatched systems, or systems with poor or nonexistent password protection) were vulnerable to being compromised or disabled by attacks from off-campus. Now, such systems are vulnerable only from attack by on-campus systems.

If you need to use Windows File Sharing or other SMB services, you can access them by using our encrypted VPN (Virtual Private Network) software. For VPN software download links and documentation, see http://micro.uoregon.edu/getconnected/

Protect Yourself

As always, we recommend that you routinely run Windows Update to keep your system patched with all critical updates. You should also secure your machine by password-protecting all accounts that can be accessed remotely.

Questions?

If you have any questions about securing your PC or using VPN, or are unsure how the SMB filter may affect you, please contact nethelp@ns.uoregon.edu or call Network Services at 346-4395.

To learn more about VPN at the UO, see the Spring 2002 Computing News article, "VPN Services Now Available" (http://cc.uoregon.edu/cnews/spring2002/vpn.html).