Just a couple of points:

While the worm itself only exploits the DCOM RPC hole over TCP port 135, the hole can also be exploited over TCP ports 139 and 445. Block those too.

This worm is really quite stupid in a number of respects, and yet the impact it has had is enormous. An expertly written worm exploiting this flaw would be nothing short of disastrous.

__________________
I want to know everything
I want to be everywhere
I want to fuck everyone in the world
I want to do something that matters