Re: Use of Host File vs. IE Restricted Zone?

From: Duane Arnold (notme_at_notme.com)
Date: 02/09/04 

Date: Mon, 09 Feb 2004 17:44:24 GMT

"traxless@yahoo.com" <traxless@yahoo.com> wrote in
news:he7f201ih3ruqdg0bfksessac5hfj6tdc9@4ax.com:

> I have tried to understand the difference between using the Host file
> to manage "crapware" versus the use of the Restricted Zone in Internet
> Explorer (http://www.mvps.org/winhelp2002/restricted.htm#Why). It
> seems that these two (2) methods of managing "ad servers, hijackers,
> dialers and parasites" have the same goal, just different strategies.
>
> I like to ask some to explain the difference between these two (2)
> strategies and if one preferred over the other. Is it wise to use
> both the Host file and the Restricted Zone to deal with these kinds of
> issues?
>
> Thank you.
>

I don't use the Restricted Zone on IE. I guess it has it purpose but
there are no entires made for it on any of my machines using IE. I do go
to IE and configure it to prompt on ActiveX download and plugins, Don't
allow unsigned ActiveX controls to download etc. etc as those are the
ones designed to attack a machine using a browser.

As I explained before, that HOST file is more than controlling WEb site
access through a browser. It has more to deal with the ability of a
program such as a WEb based program using a browser or any program
that needs to resolve the IP of a WEBsite using a DNS lookup to IP method
to access the Website. If the HOST file is in play, then the O/S is going
to go there first to resolve the IP address of a url like
www.microsoft.com. If www.microsoft.com is in the HOST file with its real
IP, then the O/S is going to connect to www.microsoft.com. However, if
the IP for www.microsoft.com is 127.0.0.1 the Loopback IP, then the
program is not going to be able to connect to www.microsoft.com.

It's that simple.

Duane :)

   

Relevant Pages

  • Re: Sygate blocking DHCP from starting
    ... It sits in front of the computers and the computer's O/S doesn't have ... then why not do the same with IPsec? ... it would be easier to shutdown functionality than it is to undo ... Then you don't understand the Host file. ...
    (comp.security.misc)
  • Re: Sygate blocking DHCP from starting
    ... It sits in front of the computers and the computer's O/S doesn't have ... then why not do the same with IPsec? ... it would be easier to shutdown functionality than it is to undo ... Then you don't understand the Host file. ...
    (comp.security.firewalls)
  • Re: Sygate blocking DHCP from starting
    ... It sits in front of the computers and the computer's O/S doesn't have ... then why not do the same with IPsec? ... it would be easier to shutdown functionality than it is to undo ... Then you don't understand the Host file. ...
    (alt.computer.security)
  • RE: Migration to new hardware
    ... can anyone give me a heads up on the Intranet website inability to log ... local only to be sure it was pulling from local box through host file and not ... windows login rather than the webpage login. ... Another is just a plain website that's still in asp. ...
    (microsoft.public.inetserver.iis.security)
  • Re: Blocking Internet Access
    ... if it's not in the host file and they wanted a website they would have to ... >I am using a Windows SBS 2003 server with Windows XP clients. ... > kind of entry to put into the content advisor. ...
    (microsoft.public.windows.server.sbs)