Re: HTTPS Question

2002-04-11 Thread Douglas Pichardo
> You can turn off port 443 at the router/firewall. > However this might prevent some legitimate secure web > traffic as well. You might try it and evaluate any > complaints. I'm not really that knowledgeable at all... but couldn't you just have a proxy disallow requests with https:// as the prot

Re: firewall books

2002-04-09 Thread Douglas Pichardo
I am pretty sure O'Reilly's - Building Internet Firewalls (2nd ED.) just covers the concepts of firewalling (why, how, where, etc.), not specifics of Iptables or anything like that. However, that might be just what you're looking for... DoPo

Re: Other side of the coin

2002-04-03 Thread Douglas Pichardo
Try Usenet, specificaly alt.2600.* and alt.hacker(s)(z).* DoPo

Re: scary site

2002-03-08 Thread Douglas Pichardo
> Saw the same thing on a Hungarian site. If you turn off active scripting > in IE it stops it from happening. :( The downside is that a huge portion of > the sites I visit need scripting enabled. My dad tried it on Win XP with IE 6 and (AFAIK) all updates, and it worked every time except when

Re: scary site

2002-03-08 Thread Douglas Pichardo
> There are also sites that will let you view all of your directory trees, > which a server could easily see all of your files. Which do you think is > more scary? There was a post about this on one of the other Security Focus mailing lists a few days ago... that is simply a small bit of HTML o

Re: Apache Security Issue

2002-02-21 Thread Douglas Pichardo
Most broadband ISP's will filter incoming port 80 access, which (I think) explains your problem. Most also offer a premium package where they'll give you more bandwidth and unfilter it, but for more money. DoPo

Re: Port 32230

2002-02-14 Thread Douglas Pichardo
http://www.iana.org/assignments/port-numbers Bookmark it, and use it as a resource. DoPo > A friend of mine is getting some inbound traffic on Port 32230 logged on > his Linksys Router. Since it does not log the protocol, I don't know if it > is TCP or UDP. > > I did a few searches, but can't fi

Re: free IDS on windows platform

2002-02-12 Thread Douglas Pichardo
www.snort.org > Hi everybody, > > I would know if you could give me a list of IDS in freeware licence on > Windows2k platform. > > thanks > > > ___ >___ ifrance.com, l'email gratuit le plus complet de l'Internet ! > vos emails

Re: what's the real address?

2002-02-01 Thread Douglas Pichardo
Maybe the computer doing the scanning has port redirection software running, so attempts to connect to certain ports on that computer redirect the attempt to the cia.gov website. If this is true, then that is pretty intelligent on the part of him. The average person would get scared typing in t

Re: a few basic simple questions

2002-01-31 Thread Douglas Pichardo
> How do you know when you are infected by a trojan or someone has control of > your pc from a backdoor? The simplest way to see if you are infected by an active trojan is to run netstat -an from a DOS window. That will show you open internet connections. You might also want to try a packet snif

Re: Portscanning from Windows XP machine

2002-01-08 Thread Douglas Pichardo
Go to www.eeye.com, they have an NT port of Nmap (runs in a terminal though), it might work under Windows XP. DoPo > Hi, > > I`m looking for a good port scanner that will run under Windows XP. My > wishlist for it that it scans TCP, UDP and stealth but i`m not really > sure if there is such a o

Please help a young aspiring security professional

2002-01-06 Thread Douglas Pichardo
Revered security professionals: Hi, my name is Douglas Pichardo and I am 16 years old. I live in Virginia Beach, Virginia (USA), and I am in the 10th grade. I have been a member of this discussion list for several months, trying to learn all I can about the world of security, which I

Re: Is there any free replacement for zone alarm ?

2002-01-04 Thread Douglas Pichardo
You can try Tiny Personal Firewall (www.tinysoftware.com) or Sygate Personal Firewall (www.sygate.com). DoPo