Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls

From: Thilo Schulz (arny_at_ats.s.bawue.de)
Date: 08/14/03

  • Next message: Daniele Muscetta: "RE: [Full-Disclosure] ISS Security Brief: 'MS Blast' MSRPC DCOM Worm Propagation (fwd)" 
    To: full-disclosure@lists.netsys.com
Date: Thu, 14 Aug 2003 12:24:14 +0200

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    On Thursday 14 August 2003 05:13, Richard M. Smith wrote:
    > Tens of millions of home owners have already purchased NAT boxes and use
    > them on a daily basis to share their cablemodem and DSL Internet
    > connections between multiple computers. These products are extremely
    > popular. Not sure what all these problems that are you complaining
    > about. In my exprerience, these boxes just work.

    Somehow, you haven't really understood what I have said.
    As long, as you do not wish to have any exotic applications or host internet
    servers you will not run into troubles. To achieve certain things you _must_
    configure your hardware router that does NAT to do port forwarding. In this
    case, I have seen enough users unable to get along with their hardware box.

    My point is, that microsoft should rather ship with a windows not opening port
    139 and 135 by default but only at the user's request. If the user has a
    hardware firewall and wants to have services opened to the world wide web, he
    will do port forwarding to the machine in question, and thus again create an
    attack vector!
    If microsoft did not open all these ports at all, we would not really need
    this hardware box and would have the same effect. Sure - some trojans could
    still open a port - but users must be careful about what programs to install
    and run anyways. And as most trojans/virii connect to a master, like channel
    in irc nowadays, this does not really do much of a difference.
    In a normal home installation with only one computer connected to the net you
    do not need any netbios or shares.

    - --
     - Thilo Schulz

    My public GnuPG key is available at http://home.bawue.de/~arny/public_key.asc
    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.2.2 (GNU/Linux)

    iD8DBQE/O2NYZx4hBtWQhl4RAo9VAJ4tyKUQtXcghLJj+mSQFAVFrXU+5ACgyg5k
    5zwooxs3gYnb6430mBO81HA=
    =177h
    -----END PGP SIGNATURE-----

    _______________________________________________
    Full-Disclosure - We believe in it.
    Charter: http://lists.netsys.com/full-disclosure-charter.html

  • Next message: Daniele Muscetta: "RE: [Full-Disclosure] ISS Security Brief: 'MS Blast' MSRPC DCOM Worm Propagation (fwd)"

    Relevant Pages

    • RE: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls
      ... connections between multiple computers. ... A Linksys NAT router box is selling for only $40 at Amazon ... Besides protecting against the MSBlaster worm, a hardware ... Then the user finds about port forwarding, and as soon as the user ...
      (Full-Disclosure)
    • RE: Hardware/Software Solution for Standalone DSL User
      ... A cable/DSL router is not a real "hardware security solution". ... Port filtering only works if used, if set up properly, and then only if ... the connection is using ports you don't allow through. ... A hardware solution such as a Cisco PIX 501 does more than NAT. ...
      (Security-Basics)
    • Re: System hangs up every day
      ... I would suggest examining the hardware components, ... The server works as: ... <ACPI PCI bus> on pcib0 ... port may not be enabled ...
      (freebsd-stable)
    • RE: System hangs up every day
      ... I would suggest examining the hardware components, ... There is one FreeBSD server in our company. ... <ACPI PCI bus> on pcib0 ... port may not be enabled ...
      (freebsd-stable)
    • Boot loop & ACPI BSODs with SP3 with ASUS mobo
      ... CMOS and then go in Bios and disable APM and serial port. ... If you try to install Win XP SP3 a USB drive or a USB stick on a USB ... I still have ACPI compliant computer, ... One of three types of problems occurred in kernel-mode: Hardware ...
      (microsoft.public.windowsxp.help_and_support)