Re: Spyware Blocklist (slightly off topic)

From: David (davidwnh@adelphia.net)
Date: 12/26/02 

From: "David" <davidwnh@adelphia.net>
Date: Thu, 26 Dec 2002 18:30:22 GMT

IPsec is more in the encryption realm of things which is more an internal
LAN solution. If it is not supported with something you are doing on the
internet then it is no alternative to a firewall. You can filter IP
addresses which is sometimes good but certain sites need to be filtered by
DNS name since their IP addresses are not static.

"Aaron" <usenet@aarontay.no-ip.com> wrote in message
news:Xns92EF361486F4Aaarontayspamremovema@203.116.1.193...
>
> > Note on usage:
> > This IP blocklist is intended to be used to block known spyware sites
> > and large ad services known or believed to be associated with spyware,
> > data mining and data warehousing companies. Most entries in the list
> > contain the following information:
> > It is strongly recommended that you download and install a firewall
> > capable of blocking (filtering) IP addresses, like Kerio Personal
> > Firewall,
> > available at www.tinysoftware.com.
>
> I'm learning about Ipsec which comes with Windows 2000 and XP. I'm
> thinking it's a good idea to use your IP blocklist this way rather than
> the personal firewall which is easily shutdown by users.
>
> Also any comments on why IPSEC doesn't replace firewall? If all things
> are equal, something intergreted into windows strikes me as better (more
> stable,transparent) then a seperate application.
>
> IS it because ipsec doesnt allow you to filter by trusted application and
> has poor warning features?
>

Relevant Pages

  • Re: Problem with IPSEC
    ... Group Policy of course makes it easy to deploy ipsec to domain ... Consequently it cannot filter the external traffic. ... rules like this work on an internal subnet. ... addresses or even a subnet on the internet it doesn't work. ...
    (microsoft.public.windows.server.security)
  • Re: Problem with IPSEC
    ... various policies on in IPSEC and activate them in task scheduler. ... Consequently it cannot filter the external traffic. ... rules like this work on an internal subnet. ... addresses or even a subnet on the internet it doesn't work. ...
    (microsoft.public.windows.server.security)
  • Re: Firewall recommendation
    ... Though not really designed to be a firewall, you might look into using ipsec ... filtering which uses only permit/deny filter actions and no negotiation for ESP/AH. ...
    (comp.security.firewalls)
  • DFL-300 IPSEC VPNs only works if your remote client is open wide open on the internet! Sucks!
    ... At this point I have been able to get IPSEC VPN's to work on the ... DFL-300 using the SafeNet software, ... direct real Internet IP, ... What company would be stupid enouth to market a firewall that requires ...
    (comp.security.firewalls)
  • Re: Problem with IPSEC
    ... I have not used that many filter lists for subnets in an ipsec rule to see ... rules like this work on an internal subnet. ... addresses or even a subnet on the internet it doesn't work. ...
    (microsoft.public.windows.server.security)