Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-22 Thread Sven Hoexter
On Fri, Aug 22, 2003 at 05:27:05PM -0400, William Warren wrote: > interesting..i have done nessus scans myself against my own router and > not found any thing to worry about in terms of incoming holes..outgoing > of course is of course another matter.. Maybe your "Router" operates in bridgemode s

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-22 Thread William Warren
interesting..i have done nessus scans myself against my own router and not found any thing to worry about in terms of incoming holes..outgoing of course is of course another matter.. Florian Weimer wrote: "Richard M. Smith" <[EMAIL PROTECTED]> writes: I agree with Microsoft's recommendation f

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-15 Thread Gary E. Miller
Yo Steve! On Fri, 15 Aug 2003, Steve Wray wrote: > Besides, most cable modems are bridges. > It'd be hard to do NAT routing on something with > no IP address itself. Yes, and no. The work as a bridge, but they are managed by SNMP. At least if they are Docsis modems. RGDS GARY

[Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Joey
Although it is true, i still thought it was interesting because it was written yesterday. They'd rather have people buy hardware firewalls instead of stopping their software from having open ports on the internet. http://microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp _

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Joey
It would be great to address this to microsoft during the Aug. 18th chat. Configuration of Services during install is a must and a way to filter what IPs they allow connections from. They might be able to throw in port configuration to run the services on different ports. --- Sebastian Niehaus >

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Richard M. Smith
EMAIL PROTECTED] Sent: Wednesday, August 13, 2003 10:18 PM To: Richard M. Smith Cc: [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls On Wed, 13 Aug 2003 20:04:47 EDT, "Richard M. Smith" <[EMAIL PROTECTED]> said: > Windows directory from

RE: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Mike Fratto
3Com makes a dial-up router and Nexland makes a dial-up router/NAT box. You can still probably find Ascend, now lucent, dial-up routers on eBay. Ok, these are techinhcally not firewalls, but suffice for most home users. I used a 3Com router with an included v.90 router for several year before broa

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Rick Kingslan
Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joey Sent: Wednesday, August 13, 2003 3:07 PM To: Tri Huynh; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls Although it is true, i still though

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Steve Wray
gt; From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of > Jonathan Grotegut > Sent: Friday, 15 August 2003 5:05 a.m. > To: [EMAIL PROTECTED] > Subject: RE: [Full-Disclosure] Microsoft urging users to buy > Harware Firewalls > > > > My only question is why

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread morning_wood
- Original Message - From: "Richard M. Smith" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 13, 2003 5:04 PM Subject: RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls > I agree with Microsoft's recommendation

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Jeremiah Cornelius
On Wednesday 13 August 2003 08:18 pm, morning_wood wrote: > re - Zone Alarm > > buy a $40 hardware router. Software firewalls are not a = > security solution IMHO." > > http://www.netsys.com/full-disclosure/2003/06/msg00074.html > No... But they ARE a part of a 'defense in depth' stance. I don'

RE: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Joey
With a dial-up connection... Is there any hardware firewalls that use regular phone lines? I havent seen any. The article was more for broadband connections because of the problem of having a static IP. --- James Patterson Wicks <[EMAIL PROTECTED]> wrote: > This are the exact words from the articl

Re: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Joey
I would have to disagree, no OS that listens on ports is secure, and firewalls can defend against all threats. The only attack that you can pull on a non-open OS or well firewalled connection is a DoS attack. Even with that, usually you dont break the OS(there was a case with win95 and "nuke" attac

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Codex
> My only question is why aren't NAT routers built into all cable and DSL > modems. because isp's are still waiting/hoping to cash in on the voip "boom"? (that, and a mirrion other reasons -- i for one want as much control as i can over the link to my provider.) as we all know, voip doesn't work

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Joey
Thats exactly the problem. It takes time to lock down services you dont need, and you cant do it during install. Theres no list of checkboxes with one that says "DCOM Server" among others in big letters when you install windows. --- William Warren <[EMAIL PROTECTED]> wrote: > I have a 5 machine LA

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Valdis . Kletnieks
On Wed, 13 Aug 2003 20:04:47 EDT, "Richard M. Smith" <[EMAIL PROTECTED]> said: > Windows directory from being accessed from the Internet. My only > question is why aren't NAT routers built into all cable and DSL modems. Because NAT is *not* a be-all and end-all. NAT *does* break things. You c

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread David Vincent
> > I agree with Microsoft's recommendation for a hardware firewall on all > > home PCs. A Linksys NAT router box is selling for only $40 at Amazon as > > we speak. Besides protecting against the MSBlaster worm, a hardware > > firewall blocks those annoying Windows pop-up spam messages which have

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Richard M. Smith
exprerience, these boxes just work. Richard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thilo Schulz Sent: Wednesday, August 13, 2003 10:00 PM To: [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls -BEGIN PGP

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Darren Reed
enough about it such that it feels like it has to promote using other firewall devices instead. Darren > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On Behalf Of Joey > Sent: Wednesday, August 13, 2003 4:07 PM > To: Tri Huynh; [EMAIL PROTECTED]

Fwd: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Stephen Clowater
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 - -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On August 13, 2003 05:06 pm, Joey wrote: > Although it is true, i still thought it was > interesting because it was written yesterday. They'd > rather have people buy hardware firewalls instead of > sto

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Paul Szabo
>> ... interesting because it was written yesterday. ... >> http://microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp > > Posted yesterday - Tony didn't write it yesterday. Ironic, however. ... You mean: a year ago yesterday (dated August 2002)? Fresh and topical still. Cheers,

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Thilo Schulz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 14 August 2003 02:04, Richard M. Smith wrote: > I agree with Microsoft's recommendation for a hardware firewall on all > home PCs. A Linksys NAT router box is selling for only $40 at Amazon as > we speak. Besides protecting against the MS

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Thilo Schulz
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 14 August 2003 05:13, Richard M. Smith wrote: > Tens of millions of home owners have already purchased NAT boxes and use > them on a daily basis to share their cablemodem and DSL Internet > connections between multiple computers. These pro

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread William Warren
I have a 5 machine LAN here at home and I have Astaro Security Linux setup on it..I have it doing NAT..at default anything not allowed is denied..the outside is left like that..and will be...on the outgoing side everything form the internal network is allowed to go outside...i am slowly but sur

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Daniele Muscetta
] >> [mailto:[EMAIL PROTECTED] On Behalf Of Joey >> Sent: Wednesday, August 13, 2003 4:07 PM >> To: Tri Huynh; [EMAIL PROTECTED] >> Cc: [EMAIL PROTECTED] >> Subject: [Full-Disclosure] Microsoft urging users to buy Harware >> Firewalls >> >> >> Alt

Fwd: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Stephen Clowater
> Sent: Wednesday, August 13, 2003 10:00 PM > To: [EMAIL PROTECTED] > Subject: Re: [Full-Disclosure] Microsoft urging users to buy Harware > Firewalls > > On Thursday 14 August 2003 02:04, Richard M. Smith wrote: > > I agree with Microsoft's recommendation for a hardwar

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Richard M. Smith
d of basic protection? Richard -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nik Reiman Sent: Wednesday, August 13, 2003 8:30 PM To: Richard M. Smith Cc: [EMAIL PROTECTED] Subject: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

Re: Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Jeffrey A.K. Dick
"While firewalls are a short term solution, intergrating them into each windows box does not solve the problem. " I think that we need to stop looking for a single "solution" ... there is no silver bullet to be found ... all OS's are insecure and no firewall can defend against all threats. There a

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Richard M. Smith
PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Joey Sent: Wednesday, August 13, 2003 4:07 PM To: Tri Huynh; [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls Although it is true, i still thought it was interesting because it w

Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Nik Reiman
Richard M. Smith quoth: > I agree with Microsoft's recommendation for a hardware firewall on all > home PCs. A Linksys NAT router box is selling for only $40 at Amazon as > we speak. Besides protecting against the MSBlaster worm, a hardware In my experience, throwing money at problems like this

RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

2003-08-14 Thread Jonathan Grotegut
My only question is why aren't NAT routers built into all cable and DSL modems. Because when they are they are a pain in the ass-et because you have absolutely no control over them. I have more problems then not because mine does have it built in (M$N DSL 1000 Modem). They have it locked down