RE: [Re-post] Suggestions for basic software for security

From: Richard H. Cotterell (seec@mail.retina.ar)
Date: 12/31/02

  • Next message: GSimmonds: "Re: [Re-post] Suggestions for basic software for security" 
    From: "Richard H. Cotterell" <seec@mail.retina.ar>
To: "Di Fresco Marco" <superdif@ciaoweb.it>, <security-basics@securityfocus.com>
Date: Mon, 30 Dec 2002 20:15:46 -0300

    Ref: Di Fresco Marco <superdif@ciaoweb.it>'s
         message dated 27 December 2002, 18:45 hours.

    >> It isn't abundantly clear what you want to do. You
    >> say you're asking for "security software" for "port
    >> scan, firewall, etc.". You say you already have
    >> ZoneAlarm and VirusScan.
    >
    >Yes, I already have ZoneAlarm and VirusScan. I would like to know if
    >there is something else to try.

    There are more, certainly, for you to try.
    >
    >> What isn't clear is what you're trying to do. Are you
    >> asking for offensive or defensive capabilities?
    >
    >I am looking for defensive capabilities.

    As you are feeling in an adventurous mood you can run NetPeeker. It will
    cross-check if your firewall is letting through what is supposedly
    allowed AND only that. It will tell you what IP address and service is
    passing through with a full log of the activity as it occurs.

    >
    >> For example, even on ME, you don't really *need* a
    >> firewall...just turn off file sharing and any other
    >> service that may be running that you don't need. If
    >> you do get interested in what the knee-biters are
    >> trying to do, sure, install ZA again.
    >
    >I have turned off all the services.
    >
    >> I think what you're missing here is the very basic
    >> concepts of security. For example, ME isn't going to
    >> provide you much in the way of local security.
    >> Upgrading to XP is better, but you still need to
    >> understand the basic concepts of security.
    >
    >In fact the (second, after defensive capabilities) purpose of my request
    >is to have some (basic) software to learn the concepts of security (at
    >least the basic ones).

    You can also get MJK's ICMP Sniffer v1.2 and a good detailed paper on
    that subject from the Security Focus website.

    Use your imagination and *Google* to find material that will give you
    information by subject that you are looking to learn from.
    >
    >> If you really do want software, check out FoundStone,
    >> NTObjectives, SysInternals, and NTSecurity.nu. Most
    >> of the software at these sites will work on
    >> XP...SysInternals has some ME software as well.
    >
    >I will give a look. For WinME I am already thinking about upgrade to XP.
    >
    >
    >
    >Di Fresco Marco
    >
    >
    >
    >
    > 

    --
Richard H. Cotterell  <mailto:seec@mail.retina.ar>
All change is not growth, as all movement is not forward.
  -Ellen Glasgow, novelist (1874-1945)

    Relevant Pages