Based on http://www.microsoft.com/isaserver/techinfo/prevent/BlasterWorm.asp#affectedports I want to TCP/666 - TCP/765. Perhaps this is just wishful thinking, but does anybody know if the following will do the trick? Specifically the: *** Ascend-Data-Filter = ip in drop tcp dstport > 665, Ascend-Data-Filter = ip in drop tcp dstport < 766, *** To get the range I am looking for? Ascend-Data-Filter = ip in drop udp dstport = 69, Ascend-Data-Filter = ip in drop udp dstport = 135, Ascend-Data-Filter = ip in drop udp dstport = 137, Ascend-Data-Filter = ip in drop udp dstport = 138, Ascend-Data-Filter = ip in drop tcp dstport = 135, Ascend-Data-Filter = ip in drop tcp dstport = 25, Ascend-Data-Filter = ip in drop tcp dstport = 139, Ascend-Data-Filter = ip in drop tcp dstport = 445, Ascend-Data-Filter = ip in drop tcp dstport = 593, Ascend-Data-Filter = ip in drop tcp dstport > 665, Ascend-Data-Filter = ip in drop tcp dstport < 766, Ascend-Data-Filter = ip in drop tcp dstport = 3333, Ascend-Data-Filter = ip in drop tcp dstport = 4444, Ascend-Data-Filter = ip in forward, Ascend-Data-Filter = ip out drop udp dstport = 69, Ascend-Data-Filter = ip out drop udp dstport = 135, Ascend-Data-Filter = ip out drop udp dstport = 137, Ascend-Data-Filter = ip out drop udp dstport = 138, Ascend-Data-Filter = ip out drop udp dstport = 445, Ascend-Data-Filter = ip out drop tcp dstport = 25, Ascend-Data-Filter = ip out drop tcp dstport = 135, Ascend-Data-Filter = ip out drop tcp dstport = 139, Ascend-Data-Filter = ip out drop tcp dstport = 445, Ascend-Data-Filter = ip out drop tcp dstport = 593, Ascend-Data-Filter = ip out drop tcp dstport > 665, Ascend-Data-Filter = ip out drop tcp dstport < 766, Ascend-Data-Filter = ip out drop tcp dstport = 3333, Ascend-Data-Filter = ip out drop tcp dstport = 4444, Ascend-Data-Filter = ip out forward, -- Arnold Cavazos, Jr. abcjr at abcjr . net ++ Ascend Users Mailing List ++ To unsubscribe: send unsubscribe to ascend-users-request at bungi.com Archives: http://www.nexial.com/mailinglists/