RE: Protecting Multiple Public IP Workstations

From: Preston, Tony (Tony.Preston_at_acs-inc.com)
Date: 03/02/04

  • Next message: Preston, Tony: "RE: Encryption question" 
    Date: Tue, 02 Mar 2004 08:31:58 -0500
To: security-basics@securityfocus.com

    I have a linksys router and have a question... It has a minimal port
    filtering capability. I block a couple of ports (135-139, 445), and
    wondered what would be a suggested list of ports to block traffic based on
    known virus/trojans.

    Tony Preston
    Systems Engineer, AS&T Inc.
    Division of L3 Corporation
    (609) 485-0205 x 181

    -----Original Message-----
    From: Paul Kurczaba [mailto:paul@myipis.com]
    Sent: Friday, February 27, 2004 7:52 PM
    To: MATT GIBSON; security-basics@securityfocus.com
    Subject: Re: Protecting Multiple Public IP Workstations

    First of all, it's never a good idea to assign public IP's to workstations
    on a networked environment (this type of environment is a hackers wish come
    true). If you are not hosting services on all six IP's, you can buy a
    $100-$150 firewall/router at compusa (I would recommend Linksys or Netgear).
    Most have 4 or 8 ports. If the firewall/router you buy only has 4 ports,
    also pick up a 4 port switch (it's about $50-$70). If you need all 6 IP's
    (for hosting HTTP, FTP, SMTP, etc.), you should probably get a CheckPoint
    FW-1 or a Cisco PIX. Also, if you havn't already bought the Win2k server, I
    would suggest Server 2003 instead. It takes less than 10 seconds to boot,
    the OS is faster, and more secure than 2000.

    just my $0.02

    -Paul Kurczaba

    ---------------------------------------------------------------------------
    Free 30-day trial: firewall with virus/spam protection, URL filtering, VPN,
    wireless security

    Protect your network against hackers, viruses, spam and other risks with Astaro
    Security Linux, the comprehensive security solution that combines six
    applications in one software solution for ease of use and lower total cost of
    ownership.

    Download your free trial at
    http://www.securityfocus.com/sponsor/Astaro_security-basics_040301
    ----------------------------------------------------------------------------

  • Next message: Preston, Tony: "RE: Encryption question"

    Relevant Pages

    • Re: ?router problem-blocking ports 137-8
      ... >Maybe I should just write a rule to block incoming and outgoing TCP ... >and UDP packets over those ports. ... The Linksys router never tries to look up these names, ... Whether or not you have more than one computer on the LAN is irrelevant. ...
      (comp.security.firewalls)
    • Re: Anyone using Linksys WUSB54G with Check Point VPN-1
      ... > connect to our gateway server, I've tried forwarding numerous ports on ... > the wusb54g system and even putting the wireless system into a DMZ, ... > The ports I've tried forwarding on the linksys router are ...
      (microsoft.public.windowsxp.work_remotely)
    • Re: Linux vs LinkSys 4 port Cable router
      ... >> I also have all the ports closed on the Linksys router. ... >> outside attempts to access my FTP server? ... I have the Linksys BEFSR41 and no ports are forwarded. ...
      (comp.os.linux.security)
    • Re: Linux vs LinkSys 4 port Cable router
      ... >> I also have all the ports closed on the Linksys router. ... >> outside attempts to access my FTP server? ... I have the Linksys BEFSR41 and no ports are forwarded. ...
      (comp.security.firewalls)
    • Re: Help with RWW issue?
      ... need to have a fixed ip address for your sbs machine in order to have the ... router forward those ports to it. ... >I am still struggling to get RWW access on my SBS2003 Standard setup. ... > (SBS Std, Linksys router, DSL modem, static IP... ...
      (microsoft.public.windows.server.sbs)
    • Quantcast