Re: Source Code to Filter out WindowsMessenger POP-UPS

From: douglas martin (dsmrtn_at_pacbell.net)
Date: 08/26/03 

Date: Tue, 26 Aug 2003 05:27:42 -0700

Zone Alarm does NOT support 'server'. I putzed with that
product for a year - I think it absolutely top notch for
workstation OS. I think I'm the one that forced them to
add the phrase their product does NOT support server.
That is all I will say about that.

I imagine I could instal MSs ISA Server (comes with msdn
sub) but I'm kinda leary of this. Seems like using a
wrecking ball when all I need is a hammer.

I stated previously, stopping messenger service is not
something I want to do. It stops all net send traffic.
Some of this traffic I want. I just want to filter out
the ones I don't want.

I am a professional program developer (30+ years) - I do
NOT copy and paste code into compilers. It is all just
about protocols, and exposing the correct objects with
appropriate code to do what you want with the ob jects and
protocols. I just don't know what the objects are nor the
calling sequence to the protocols. I doubt it runs as
a 'service', maybe it has to run kinda of like an ISAPI
filter.

I don't have 15 pcs in my lab. I don't have the money or
rsources to have a dmz with bastion hosts and such. I am
running a small lab lan which has a mail server which
needs some ports open to the world - dns, time, smtp,
http. Very few ports are open, very few.

I would like a software solution that ideally runs
locally. And just as important, I'd like to make the
solution available to anyone for free.

Mine is an educational lab. With source code, or a good
book or sdk resourses I learn something. With a hardware
solution or 3rd party product I just learn another
install. If thee were cheap enough cisco routers that
were programmable, this would be okay.

doug

>-----Original Message-----
>What you are asking for amounts to a firewall. Try
something like
>ZoneAlarm, which is free for personal use (last I
checked) and blocks what
>you're interested in blocking.
>
>Personally, I would NOT search for source code to compile
and run because it
>amounts to running arbitrary binary that someone sent
you. Just because
>it's free source code doesn't make it any less dangerous.
>
>I want some assurances on this code's authenticity.
There may be lots of
>sample code that compiles on Linux, but how do you know
that someone hasn't
>plant'd a trojan horse or virus? Are you going to
examine the code
>thoroughly? Do you have the skills to do it? If you
can't, can you find
>someone who does? How can you trust that person, and are
they taking
>responsibility for certifying the authenticity of the
code? If they
>aren't -- who will, in the case that there is a virus?
What about the
>compiler that compiles your distro -- are you sure it
doesn't have a trojan
>horse?
>
>--
>//David
>IIS
>This posting is provided "AS IS" with no warranties, and
confers no rights.
>//
>"douglas martin" <dsmrtn@pacbell.net> wrote in message
>news:086601c36b82$6fbddc20$a301280a@phx.gbl...
>I've read the iissecurity faq's in this. i have a
>firewall, I need those TCP Ports open (135-139), but not
>UPD ports and my firewall isn't that granular. The port
>is open or closed.
>
>Is there source code (VB, C++, C, C# for either MS VS6
>or .Net compiles) I can run for my Win2000 server that
>will allow me to define wich ports and which protocol to
>filter on so I can selectivel edit pass either pass thru
>or filter out requests - to block the SPAM POPUPS.
>
>Oddly, the ONLY POPUS I get are from companies who admit
>they are annoying, but visit out site, drop off $25 and
>you too can download our not quite useful utility so we
>can programatically stop your Messenger Service, which I
>kinda want to leave started.
>
>I've done searches for several days and while I haven't
>found any code to prevent problem issues, I've found lots
>and lotsof code samples (all compilable on linux boxes) to
>kill and/or main a variety of MS O/S's, Services,
whatever.
>
>If I can get this source code working I promise to offer
>the source code and/or the binaries FREE to anyone who can
>do an FTP.
>
>Even pointing me to a book and/or SDK that describes the
>process would be appreciated.
>
>Granted, my firewall is mostly just a low-end LinkSys DSL
>Router, I wouldn't mind upgrading to a router/firewall
>that allows a real scripting/programming interface to
>apply pass/fail rules to - provided the router isn't one
>of the $30K wonder. Which certainly explains why my
>router (with only an HTML point/click interface) cost so
>little.
>
>
>regards,
>
>doug
>
>
>.
>

Relevant Pages

  • Re: Interesting webserver intrusion (apache 1.3.31, mod_ssl 2.8.18, php 4.3.7)
    ... > fairly tight(only allowing 4 ports in), but perhaps I could tighten it ... The host systems firewall rules govern the access to the jailed system. ... What connections does your server need to ... Perhaps there is a 0-day for your ftp server out there. ...
    (Incidents)
  • Re: Add 2nd NIC after intial install?
    ... My biggest question with 1 NIC is: even if workstations are protected with individual firewall products, what is protecting the SBS server itself if ports are open for remote access through the Linksys firewall? ...
    (microsoft.public.windows.server.sbs)
  • Re: Using Office Outlook with exchange server behind windows firewall
    ... On our network I have windows firewall turned on, on both my small business server and my windows xp workstations. ... Based on an article I read about all the ports that exhange may use I also tried making exceptions for ports ...
    (microsoft.public.windows.server.sbs)
  • Re: NETFW.INF, Preconfigured Firewall settings and dialogs
    ... it is Windows Server 2003 SP1 firewall that i'm using. ... Using the document '832017 Port Requirements for the Microsoft Windows ... > to achieve the following goal: some ports are open by default and others ...
    (microsoft.public.windows.server.networking)
  • Re: Source Code to Filter out WindowsMessenger POP-UPS
    ... I really have no idea where you can find decent firewall source code on ... Zone Alarm does NOT support 'server'. ... Very few ports are open, ... >sample code that compiles on Linux, ...
    (microsoft.public.inetserver.iis.security)