Re: Where does ICF store it`s ACL ?

From: Strcpy (elite_netbios_at_yahoo.com)
Date: 09/29/04

  • Next message: David Gillett: "RE: PortFast Question"
    Date: Tue, 28 Sep 2004 23:56:12 -0700 (PDT)
    To: security-basics@securityfocus.com
    
    

    Hi again

    thnx for the mentioned document on SP2
    but I`m talking aboust SP1 .
    not decided to upgrade to SP2 yet ;)

    and about choosing another FW .
    that`s not a problem , moveing to another
    Firewall like ZoneAlarm or anything esle...
    it`s as easy as some clicks to run my setup.exe
    but I should find out baout this behave if ICF.
    some where in registery I located some keys mentioned
    to ACL`s added to ICF , but changing/removeing them
    changed nothing .
    seems it`s not with registry or if it is , it`s
    encoded/encrypted ...

    regards
    --- Paul Kurczaba <paul@myipis.com> wrote:

    > This is the same problem that happened to me on my
    > Microsoft MN-500 wireless
    > router. It was opening up ports left and right. I
    > had to manually delete the
    > ACL daily. I finally got sick of doing so, and
    > decided to purchace a Netgear
    > wireless router. Back to ICF... I really don't know
    > where the ICF ACL is
    > stored. If I were you, I would disable ICF, and
    > install ZoneLabs' ZoneAlarm.
    > It has more features than ICF, as has a better
    > security history than
    > Microsoft products. If you don't want to go with
    > ZoneAlarm, my second choice
    > would be Kerio Personal Firewall.
    >
    > -Paul
    > ----- Original Message -----
    > From: "Strcpy" <elite_netbios@yahoo.com>
    > To: <security-basics@securityfocus.com>
    > Sent: Saturday, September 25, 2004 7:24 AM
    > Subject: Where does ICF store it`s ACL ?
    >
    >
    > > Hi list ,
    > >
    > > I wonder where does microsoft ICF
    > > ( Intecnet Connection Firewall) store it`s ACL ?
    > >
    > > I tried searching system files or registry , but
    > > nothing revealed by my simple search.
    > >
    > > why I`m asking this?
    > > some MS prgrams like Windows-Messenger
    > automaticaly
    > > add items to this list to garant their access.
    > > on a firewalled network , messenger try many ports
    > to
    > > find one working , and this magically cause a
    > local
    > > DoS ,
    > > when you try to open ICF configuration and
    > add/remove
    > > firewall rules...
    > > now , my ICF is flooded with messenger`s added
    > > rules...
    > >
    > > anyway to flush the rules ?
    > >
    > >
    > > regards
    > >
    > > __________________________________________________
    > > Do You Yahoo!?
    > > Tired of spam? Yahoo! Mail has the best spam
    > protection around
    > > http://mail.yahoo.com
    > >
    >
    >
    >

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com


  • Next message: David Gillett: "RE: PortFast Question"

    Relevant Pages

    • Re: Windows XP Pro, Problems with Yahoo Geocities and more
      ... Type ICF into the textbox of Find on top Lt corner of the Help and Support ... The first item under Pick A Task is Enable or Disable Internet ... go back to Yahoo. ... in "Internet Connection Firewall" or ICF I could shut down ...
      (microsoft.public.windowsxp.help_and_support)
    • Re: SP2
      ... I receive an internet connection via a wireless card ... If I install SP2, will I still be able to receive an internet ... XP SP2 enables ICF by default, but ICF will not interfere with ...
      (microsoft.public.windowsxp.network_web)
    • Re: VB6.exe abort after system rebuild?
      ... The biggest stumbling block I see on the SP2 is the use of the ... questions the ICF poses. ... My office is not upgrading to SP2 (delaying is the word they ... I haven't seen anything on where SP3 is going yet. ...
      (microsoft.public.vb.general.discussion)
    • Re: Concerned about security changes in XP SP2 (Particularly enabling ICF)
      ... > The article states that ICF will be enabled by default in WinXP SP2. ... OS (at least without being asked for it and for unattended installs having ... Microsoft MVP Scripting and WMI, ...
      (microsoft.public.security)
    • Re: sharing a firewall?
      ... I am not going to recommend not using a firewall inside a LAN; ... ICF does not provide outbound application control; ... I've heard that MSFT did not add that to ICF in SP2. ...
      (microsoft.public.windowsxp.network_web)