Re: March 29, 2006 total eclipse - IT admin's WORST NIGHTMARE

From: Charles Newman (charlesnewman1_at_comcast.nospam.net)
Date: 10/29/05

  • Next message: George: "Re: "Network Cable Unplugged" error (FR114P)" 
    Date: Sat, 29 Oct 2005 03:12:42 -0230

    "Leythos" <void@nowhere.lan> wrote in message
    news:o3C8f.73308$Hs.28044@tornado.ohiordc.rr.com...
    > In article <ccydnSSUvdooUP_eRVn-rg@comcast.com>, charlesnewman1
    > @comcast.spam-me-not.net says...
    >>
    >> "Moe Trin" <ibuprofin@painkiller.example.tld> wrote in message
    >> news:slrndlft96.hqq.ibuprofin@compton.phx.az.us...
    >> > In the Usenet newsgroup comp.security.firewalls, in article
    >> > <h-WdnQ11oZ45-MveRVnyiw@pipex.net>, Mike wrote:
    >> >
    >> >>One question. If this broadcast system is supposed to bring the
    >> >>networks
    >> >>to a grinding halt, how is anyone supposed to watch the event your
    >> >>broadcasting? Seems to defeat the object of the exercise to me.
    >> >
    >> > You really don't expect a troll to notice all the little details, do
    >> > you?
    >>
    >> There might be more tests going on. I caught a video
    >> feed of Skate America that was pure genius. It kept
    >> changing port numbers and addresses like crazy.
    >> Based on what this guy kept talking about in the past,
    >> it could be them. It if is, the only way to stop it is
    >> to block everything from ports 1000 through 9000.
    >
    > Wrong, any real firewall will block it.

    Well, the constantly changing ports and addresses, port
    blocking is the only feasable way to stop it. With the
    real-time monitoring in Tiny Personal Fireall (sorry, but
    your hardware firewalls have not learned this yet), I
    watched as addresses and ports changed like crazy,
    that would make anything other than port blocking to
    be useless. These guys know what they are doing
    with computers, and port blocking is the only fesable
    way to stop them.

    This is where Tiny has the advantage over a hardware
    appliance. Firewall rules can be given precedence. I
    can tell Tiny to block everything from port 1000 to
    9000, but if there is something else I want to allow
    in that range, I can create rule with a higher precdence
    to allow that specific service, while blocking everything
    else in the port range. Hardware appliances dont have
    precedence for rules like Tiny Personal Firewall does.
    Score another one for software firewalls.

  • Next message: George: "Re: "Network Cable Unplugged" error (FR114P)"

    Relevant Pages

    • Re: keeping ports open
      ... If a port is open, it means that 1) a software or service is running on your ... and 2) you're not using a firewall or your firewall isn't ... Use firewall software and hardware and antivirus software that is ... Follow the instructions for hardening Windows and IIS at ...
      (microsoft.public.security)
    • Re: How to Maintain an IIS Server?
      ... > server running on a Windows 2000 server. ... before a firewall and antivirus have been installed]. ... open ports; however, this will not identify which program is using the port. ...
      (microsoft.public.inetserver.iis.security)
    • Re: CEICW fails at firewall config
      ... ISA Server prevents connection to a remote desktop when you connect through ... Remote Web Workplace on a Windows Small Business Server 2003-based computer ... Acceleration Server as a firewall. ... connection uses TCP port 4125. ...
      (microsoft.public.windows.server.sbs)
    • Re: How to Maintain an IIS Server?
      ... >> server running on a Windows 2000 server. ... > before a firewall and antivirus have been installed]. ... > program or executable using that port. ...
      (microsoft.public.inetserver.iis.security)
    • Re: Is secedit.exe left by a hacker?
      ... > tested on port 445. ... > I have a Linksys router that I use as a firewall to my ... Secedit.exe is the name of a legitimate Windows file, ... investigate the files on your computer - antivirus with the latest updates ...
      (microsoft.public.win2000.security)