Re: Tips on blocking 'difficult' services..

arja <aaihetapie@xxxxxxxxx> wrote:
"Sebastian Gottschalk" <seppi@xxxxxxxxx> schreef:
arja wrote:
And more worse, you always forget ports.

And even worse, you can run all of these protocols over any port you
want. Now when will people stop following this "outbound filtering"
nonsense?

Never because it often provides usefull information in case of an
infection.

That is outbound *monitoring*, whereas Sebastian was talking about
outbound *filtering*. It is undisputed that outbound monitoring can give
you pointers in case of an infection, but that has nothing to do with
the fact that outbound *filtering* is not reliable and should thus not
be regarded as a security measure.

cu
59cobalt
--
"Personal Firewalls are crap. Throw away any personal firewall. Personal
Firewalls are bad[tm]."
--Malte von dem Hagen on security-basics
.

Relevant Pages

  • Re: Zone Alarm (Freeware-) stopped reporting intrustions..
    ... Basically some guy at MS deems the need for Outbound Traffic Filtering ... one), and this was the reason, why this user bought the "security ... because online software updates protect ...
    (comp.security.firewalls)
  • Re: black ice usage question
    ... how important outbound filtering is, and also that the game is not over ... > Outbound packet filtering is somewhat critical as far as I am concerned. ... administrator one allows several of these steps to be unnecessarily ... get adequate protection from outbound initiated traffic. ...
    (comp.security.firewalls)
  • Microsoft TechNet Magazine Article about Outbound Filtering
    ... Host-Based Firewalls Must Filter Outbound Traffic to be Safe. ... | The fact is, despite everyone's best efforts, outbound filtering is ... be needed any more for a default Windows installation, ...
    (comp.security.firewalls)
  • Re: Passwort-Verwaltung
    ... Host-Based Firewalls Must Filter Outbound Traffic to be Safe. ... "The program NotAVirus.exe wants to communicate on ... | The fact is, despite everyone's best efforts, outbound filtering is ...
    (de.comp.security.misc)
  • Re: Microsoft TechNet Magazine Article about Outbound Filtering
    ... why is there so much noise about outbound ... "The program NotAVirus.exe wants to communicate on ... The fact is, despite everyone's best efforts, outbound filtering is ... software firewall that monitors ougoing connections (if it just doesnt ...
    (comp.security.firewalls)
Quantcast