Re: which firewall

From: Duane Arnold (darnold92@Insightbb.com)
Date: 05/27/02 

From: "Duane Arnold" <darnold92@Insightbb.com>
Date: Mon, 27 May 2002 09:31:52 GMT

Because BlackIce is an firewall/ids application, behind the Linksys
firewall, it will detect and block suspicious activity on port 80. I use DMZ
for the computer that has IIS and SQL Server on it. So far BlackIce has done
its job.

"Peter Larsen" <plarsen@mail.tele.dk> wrote in message
news:3CF1D21C.DB8B6361@mail.tele.dk...
> chris@nospam.com wrote:
>
> > Big problem everyone here is missing is that a firewall is
> > useless to protect IIS.
>
> Which is why I suggested putting it on the inside of the webserver! -
> but perhaps it was too subtle to skip explaining why.
>
> > You have to let requests through to port 80 right?
> > Recall that a large majority of the IIS attacks are specially
> > malformed get requests.
> >
> > -Chris
>
> --
> *************************************************************
> * This posting handcrafted by Peter Larsen, MCSE *
> * My site is at: http://www.muyiovatki.dk *
> * I subscribe to http://www.spamcop.net *
> *************************************************************

Quantcast