More on Sasser, IPSec Firewalls, and SMBhttp://blogs.technet.com/tristank/archive/2004/05/06/126963.aspxI've had a couple of internal and external questions on the last post; rather than keep on flogging the earlier article , here's some more background information on how this all works. I've been known to be wrong before, so please yell if you spot anyen-AUCommunityServer 2.1 SP1 (Build: 61025.2)Using IPSec Policies as a Firewall to Block SASSER Infectionhttp://blogs.technet.com/tristank/archive/2004/05/06/126963.aspx#153379Fri, 11 Jun 2004 13:04:00 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:153379Extra Bits That Didn't Fit