Making a W2K with Internet Connection Sharing secure

2003-01-09 Thread Sarbjit Singh Gill
Greetings, I am a part of a group of volunnteers who help with teaching underprivileged kids in orphanages. we had some donation of softwares from Microsoft and hardware from HP and DSL connectivity from a local telco. The setup looks something like this : DSL modem connected to a multi

re: General Security audit question

2003-01-09 Thread H C
I have a pretty decent idea of what I'm looking for, but if anyone has any links to, or templates of what you would find in a security audit could you please let me know or send me a copy? Dallas, You may need to be more specific...what you're asking is going to end up w/ three general

Re: Sendmail 8.11 configuration/security issue - some clarification

2003-01-09 Thread theog
Try virtusertable in sendmail (must be specified when doing m4 to the .mc file as FEATURE(virtusertable) ). Cheers TheOg Liran Cohen Ned Fleming wrote: On Mon, 06 Jan 2003 22:11:49 +, [EMAIL PROTECTED] wrote: Thanks for the input on this so far. To clarify, [EMAIL PROTECTED]

experience requirement (was: Re: Security+

2003-01-09 Thread Meritt James
For the first two, yes. For CISSP you have to find another CISSP who is willing to place his name next to yours on a recommendation and you have to say that you have had it. For the second, you have to get people that knew you were in those positions to furnish documentation to that effect (HR,

RE: win2k firewall

2003-01-09 Thread Jimmy Sansi
Running a firewall on a seperate machine or the server itself is not a replacement for good security configurations and keeping the system patched and plugged. If it is dedicated to being a webserver only, turn off non-essential services and stick it in a DMZ. As someone else mentioned using

RE: win2k firewall

2003-01-09 Thread Zimin, Alex
In some cases UNIX box or Cisco firewall is not an option. I had deal with the Satellite ISP, where only a Windows box can be connected to the Internet. Kerio makes a firewall product which is free for personal use. http://www.kerio.com/us/kpf_download.html I'm not sure how good it is compare

RE: Security+

2003-01-09 Thread Lachlan McGill
I suggest you look at something that does not require industry experience but is very reputable like GIAC certification. Go to www.giac.org. -Original Message- From: Gedi [mailto:[EMAIL PROTECTED]] Sent: Tuesday, 7 January 2003 11:35 PM To: [EMAIL PROTECTED] Subject: RE: Security+ Hi

Understanding Firewall-1 Configs

2003-01-09 Thread amy_morgan
-BEGIN PGP SIGNED MESSAGE- Our network engineer just left the company and all of his responsibilities have been transferred to me, including the firewall. So, here's what I'm trying to find out... This is a general diagram. Internet | |

RE: Security+

2003-01-09 Thread Clement Dupuis
Good day Gedi, Security+ is targeted at individuals with 2 years of experience, they recommend that you have the level of knowledge of A+ or Network+, from what I have read it seems that you really do. I do not see why you cannot take the Security+ exam. The 2 years is not a requirement but a

FW: win2k firewall

2003-01-09 Thread Mahoney, Paul
Ok guys, I have to add my pennyworths here. I have for many years run web servers live on the Internet in environments with and without any type of firewall. I would not recommend this way to an individual, but the benefits seen through increased performance, lack of admin, reduced costing etc

TruSecure Organization

2003-01-09 Thread Tony Toni
Hi, Has anyone used TruSecure Organization to supplement their security efforts? A short background is our IT Department will be using the TruSecure to help ensure that the security for servers (Unix, Win2K/Nt, Aix) and Cisco routers is proper. I was curious about how the following groups

RE: General Security audit question

2003-01-09 Thread Rapaille Max
HI. You could have a look at the osstmm : Open Source Security Testing Methodology Manual. A very good doc for Sec audit. Available for free at www.osstmm.org, or perhaps www.ideahamster.org... I think they changed the name not so long ago, but you should be able to find the link easely to

ghostly mail ports

2003-01-09 Thread joe
Hi, im new to security and this is my first post, so be gentle :) I have a fairly good understanding of the tcp/ip model and i think i understand what ports are for! but i cant understand that on my box, i have the 2 default mail ports (25 and 110) open. Its a windows 2000 box, service pack