Re: How good is Win XP Pro Internet Connection Firewall

From: Wayne McGlinn (wmcglinn_at_optushome.com.au)
Date: 07/29/03


Date: Tue, 29 Jul 2003 18:04:28 +1000

By default, ICF blocks all incoming connections. If you wish incoming
Internet access then you must either tick the appropiate box or create a new
service with the correct port number. If you're using MSN Messenger, then XP
adds the ports needed to allow uploads to your pc. Using ICF and a reputable
virus/bot checker (Cleaner32 from http://www.moosoft.com is pretty thorough)
plus unchecking "File and Printer Sharing for Microsoft Networks" from your
external interface means you've got a pretty secure pc. Keeping up with
service packs and updates from MS is essential. Also, if you're running
IIS, go to
http://www.microsoft.com/technet/treeview/?url=/technet/security/tools/tools/locktool.asp
and run the IIS Lockdown Tool.

Wayne McGlinn
Brisbane, Oz

"Ninja" <ninja@kungfuchaos.com> wrote in message
news:u3mVa.24293$46.4399184@news2.telusplanet.net...
> Hi Duane,
>
> I'm using IIS for learning purposes only, and don't want it accessible
from
> the outside. By default Norton Firewall allow access to IIS. It was a bit
of
> a pain to get it configured to prevent outside access. I regret buying NIS
> 2003. Will ICF disable access to IIS from the outside by default?
>
> I also intend to setup a wireless home network one of these days. If I buy
a
> wireless router, does that come with integrated firewall? If so, shall I
> still need a software firewall? I know almost nothing about routers, and
> this has always been very unclear to me how a hardware firewall can be
> effective. Is there software update to upgrade the hardware firewall?
>
> Thanks.
>
>
> "Duane Arnold" <notme@notme.com> wrote in message
> news:Xns93C6E2E2179ABnotmenotmecom@63.240.76.16...
> > "Ninja" <ninja@kungfuchaos.com> wrote in
> > news:L4lVa.24107$46.4363636@news2.telusplanet.net:
> >
> > > I'm running IIS on my PC. Is the Win XP Pro ICF good enough?
> >
> > I would suggest putting a NAT router device in front of the machine. And
> > if you get jazzy with IIS like opening it for public access, then a host
> > based packet filtering FW like NPF would be advised.
> >
> > http://www.homenethelp.com/web/explain/about-NAT.asp
> >
> > You can find a good one sale for the price of a host based FW solution.
> >
> > Also, you should learn to lock down IIS and the XP O/S from attack from
> > the Internet.
> >
> > http://www.uksecurityonline.com/husdg/windowsxp.php
> >
> > Too many people try installing a host based FW solution not fully
> > understanding what it takes to make them run. And on top of that, they
> > don't discuss their issues in a <g> like this or contact the FW's Tech
> > Support to discuss the issues.
> >
> > They just run to the next FW. I'll guarantee you that whatever issues
> > you're having with the FW, if you put the issues on the table, there is
a
> > solution to the issue.
> >
> > And most ISP(s) don't allow a machine running Web Services to be running
> > on their network. So it's best to close the ports when you're not using
> > the Web Services, otherwise, you may get an email from the ISP telling
> > you to close the ports or service to you will be dropped.
> >
> > BTW, I Use BlackIce.
> >
> > Duane :)
> >
> > --
> > The protection of the machine is a process and not a given!
>
>



Relevant Pages

  • Re: ISA2004 SP2: EventID 14148
    ... No firewall is active on the Cisco and all ports are passed through. ... Most likely it is IIS. ... are no thing different for web server publishing and IIS. ...
    (microsoft.public.isa.configuration)
  • RE: Opening ports for remote access
    ... > you'll eventally get to the prompt Firewall. ... Disable your Firewall (which will open ALL Ports) or enble Firewall. ... >> I'm setting up a Small Business Server Standard and want to host some ... >> second NIC and bypass the router to use IIS? ...
    (microsoft.public.windows.server.sbs)
  • Re: Internet Connection Firewall question
    ... True for ICF and Windows Firewall. ... > were available to other LAN machines. ... How to Manually Open Ports in Internet Connection Firewall in Windows XP ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: ICF help!!!
    ... Unless the firewall is working, all ports are open. ... |>>> I was told that my ICF should be checked. ...
    (microsoft.public.windowsxp.general)
  • RE: Opening ports for remote access
    ... have enabled your SBS Firewall, you need to open up the port in there as ... you'll eventally get to the prompt Firewall. ... Disable your Firewall (which will open ALL Ports) or enble Firewall. ... > second NIC and bypass the router to use IIS? ...
    (microsoft.public.windows.server.sbs)