Re: Blocking Hackers Questions W2K

From: Leythos (void_at_nowhere.com)
Date: 09/06/03


Date: Sat, 06 Sep 2003 14:27:12 GMT

In article <jggjlv8ablh2lmpf6o2fi11ndrm5hg183s@4ax.com>,
NOSPAMpeetm@blueyonder.co.uk says...
>
> I'm a PhD student in AI and part of my research involves me having my
> own server attached to the local network and the internet.
>
> Recently, my server was found to have been hacked - it was running
> some internet chat process - and so the univ pulled the plug out of
> the back of it until I get it sorted.
>
> So, questions!
>
> Is there some hardware fix for this? I use a linksys router at home
> and, since I put that in, ZoneAlarm hasn't show one single hack attemp
> - so, would a router or something like that prevent unwanted access to
> my server? If so, would it still be secure if I put a website on the
> server and allow http access?
>
> What's the best software fix/product to run on the server - either to
> catch and prevent hackers or to assist me in configuring the server so
> as to batton down the hatches?
>
> many thanks,

I would guess that you didn't use MS Update to PATCH your machine and
that you have file/printer sharing enabled on a PUBLIC IP address and
were not running any firewall or virus software.

The problem with ZA, BI, etc... is that if you don't properly configure
them, or if you allow something that you don't really understand, that
you will get hacked.

A router is your primary line of defense - it blocks ALL inbound
connections unless your computer invited them in.

Quality Anti-Virus software is the next.

Running Microsoft Update every evening is the next step.
Running Microsoft Office Update every week is a good thing to do also.

Since you said Windows 2000 - I would assume that you may have IIS and
FTP and SMTP services installed - if you are not using them then you
should remove them.

Once you get the $50 linksys router you should download the free
WallWatcher program and enable logging in the router. It will clearly
show you what is going IN and OUT of your network.

No one I know that is using a Linksys router between their network and
the internet was effected by the Blaster worm (or the slammer or any
other worm) in more than 3 years.

There are many other things you can do, but if you do everything above
you should not have any problems with uninvited strangers.

Remember - if you get an email, even from someone you know, and it has
an attachment, and you didn't ask for it, don't open it - even your
friends can send you infected files (or macro's) once their machines are
compromised.

Mark

-- 
--
spamfree999@rrohio.com
(Remove 999 to reply to me)


Relevant Pages

  • Re: IP routing with remote DNS, but server & client on same subnet - how?
    ... One Linux server running Apache2 ... I have a website running on the Apache server, ... On the Linksys router, I have my cable modem IP address port-forwarded ... network, on one of my WinXP clients and I browse to www.mydomain.net, ...
    (comp.os.linux.networking)
  • Re: [SLE] trying to set up ip forwarding and masqurading...
    ... PPPOE performed by the Linksys router. ... i WANT all the internet to go through the server for various reasons. ... and i want to see how much bandwidth each person in the network is ...
    (SuSE)
  • Re: Blocking Hackers Questions W2K
    ... > own server attached to the local network and the internet. ... Running Microsoft Office Update every week is a good thing to do also. ... Once you get the $50 linksys router you should download the free ...
    (alt.computer.security)
  • Re: Problems w/ setting up a Linux DMZ Server behind a Linksys Router
    ... I have a linksys router and from the install, one or two click did the job ... everything worked on the network connection in one minute. ... connection downloading the ISO and creating the CD's is not that hard. ... > filters and turned on DMZ for the server IP, ...
    (comp.os.linux.networking)
  • Re: Fully parallel Scheme-based language w/ evaluator
    ... Windows Server 2003 and networks in simple - and irreverent - terms. ... If networking really is a big deal, ... Concepts and Terminology in Part I, and The Design and Deployment of Network ...
    (comp.lang.misc)

Quantcast