Anti-MAC & Anti-IP Spoofing in Zone Alarm v4.0?

From: Adrian (adrn_at_wp.pl)
Date: 10/31/03


Date: Fri, 31 Oct 2003 17:06:11 GMT


"mhicaoidh" <®êmõvé_mhic_aoidh@hotÑîXmailŠPäM.com> wrote in
news:Srvob.70300$Tr4.192872@attbi_s03:

> Component Control which would monitor what programs *other*
> programs were using to connect

Yes, this is obvious in all programs of that sort.

But I meant something more specific.
In firewalls of Kerio and Sygate one can create one's own rules in which the
sorce/destination option could be bound to a specific network interface, ie.
to specific Ethernet card in a computer if it is home network internet
sharing gate.

Such an inclusion of arbitrarily chosen network adapter in user defined rules
prevents eg. the "spoofing" kind of an attack:
http://www.kerio.com/wrp_netfw.html
http://smb.sygate.com/products/pspf/whatsnew_pspf.htm

-- 
Adrian


Relevant Pages

  • Re: virus?
    ... > to my network and clogging it up. ... I have norton antivirus, ... this traffic, Kerio, Zone-Alarm and similar products should be ... But neither firewalls nor anti virus tasks can see the difference ...
    (microsoft.public.windowsxp.security_admin)
  • Re: ANN: Kamaelia 0.2.0 released!
    ... So what does Kamaelia do that's extra? ... What sort of data ... to build complex network applications is an ambitious one, ... What other protocols are necessary? ...
    (comp.lang.python)
  • RE: [fw-wiz] Firewalls v. Router ACLs
    ... people to take in consideration in network design and layout. ... here and the old firewalls list often emphasized an approach that avoided ... The logging alert features alone turn this layer into a IDS as ... > An appropriately sized router will not have any performance problems. ...
    (Firewall-Wizards)
  • [fw-wiz] IDS/IPS and LOGS
    ... nasty behavior is happening on your network (where your network is ... easily turn your IPS into a big denial of service attack. ... My guess is that most of the Worlds firewalls and IDS/IPS only have half ... I noticed that there is a big emphasis on log parsing while there should ...
    (Firewall-Wizards)
  • Re: Establish persistant outbound connection for covert application
    ... which firewalls are running etc.) and then communicate its ... the actual network layer. ... They do have 2 network interfaces in case I want to chain them between a PC ... They also have a wireless interface so I can hook into the machine if I am ...
    (Security-Basics)