> Is there some new worm or exploit going around? My firewall is getting > hammered on port 445. > First place to check is: http://www.us-cert.gov/current/current_activity.html >From this, I found that the current activity is with W32/Korgo and W/32/Sasser, both of which scan port 445. Security updates on these two was June 24. Alvin