Re: Always allow loopbacks ?
From: EA (ea@someisp.invalid)Date: 01/21/02
- Next message: kackson: "zone alarm webcast setup"
- Previous message: Pete Slattery: "TPF Setup"
- In reply to: Dennis Heidner: "Re: Always allow loopbacks ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: EA <ea@someisp.invalid> Date: Mon, 21 Jan 2002 04:27:02 GMT
?????? I'm not sure if you are responding to my post (which you
snipped) or to the original question that started the thread (which you
quoted) but the rules I suggested would allow programs like Frontpage
to use localhost while they would block any non-legitimate connections.
However, after rereading my own post I realized that I did not explain
the rules clearly. They should be like this:
1. Rules that give permission to legitimate programs to use the local
server/proxy (localhost, specifying the port of the server).
2. A rule that blocks all programs from connecting to the specific
port of the local proxy (localhost, server port).
3. Loopback rule (specifying the specific port--usually one of the
ports is always the same).
Since rules are read from the top, legitimate requests would match one
of the rules under #1 whereas all others would be blocked by #2.
The original poster never asked about networks, routers, etc. He
has a home computer and he just wanted to know whether it is safe to
allow all connections to localhost. If he is running a local proxy, it
is not safe unless he can be 100% sure that his system will never run a
malicious program.
E,
"Dennis Heidner" <dennis@heidners-no-spam.net> typed in
news:01c1a208$ebe78020$031e82c0@bigbird:
> The loop back address can also be used by client/server programs
> running on the same machine. I.E. apps that access /localhost/
> like Frontpage, etc.
>
> EA <ea@someisp.invalid> wrote in article
><Xns919C852835BC5eid99@207.106.92.226>...
>> Karl Forsberg <YCZBHGMVZXFB@spammotel.com> typed in
>> news:MPG.16b3cf6463f9a5139896e1@news1.telia.com:
>>
>> > On a home computer running Windows, is there in any danger in
>> > having a rule allowing all loopback connections or is it better
>> > to be selective?
>>
>>
>
- Next message: kackson: "zone alarm webcast setup"
- Previous message: Pete Slattery: "TPF Setup"
- In reply to: Dennis Heidner: "Re: Always allow loopbacks ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
