Re: Source Code to Filter out WindowsMessenger POP-UPS

From: Roger Abell (mvp_at_NOSpam.asu.edu)
Date: 08/26/03 

Date: Tue, 26 Aug 2003 06:41:27 -0700

You could consider using IPsec in a filtering mode.
With a little practice you can learn to define a filtering
policy that will allow only what you wish to pass, such
as specific ports from only specific IP ranges while
rejecting all traffic on those same ports from any other IP.
This is standard in W2k and later, server or pro.
Alternatively, there are firewalls like Tiny and Kerio. 

-- 
Roger Abell
Microsoft MVP (Windows, Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"douglas martin" <dsmrtn@pacbell.net> wrote in message
news:04a801c36bcd$722215d0$a001280a@phx.gbl...
> Zone Alarm does NOT support 'server'.  I putzed with that
> product for a year - I think it absolutely top notch for
> workstation OS.  I think I'm the one that forced them to
> add the phrase their product does NOT support server.
> That is all I will say about that.
>
> I imagine I could instal MSs ISA Server (comes with msdn
> sub) but I'm kinda leary of this.  Seems like using a
> wrecking ball when all I need is a hammer.
>
> I stated previously, stopping messenger service is not
> something I want to do.  It stops all net send traffic.
> Some of this traffic I want.  I just want to filter out
> the ones I don't want.
>
> I am a professional program developer (30+ years) - I do
> NOT copy and paste code into compilers.  It is all just
> about protocols, and exposing the correct objects with
> appropriate code to do what you want with the ob jects and
> protocols.  I just don't know what the objects are nor the
> calling sequence to the protocols.  I doubt it runs as
> a 'service', maybe it has to run kinda of like an ISAPI
> filter.
>
> I don't have 15 pcs in my lab.  I don't have the money or
> rsources to have a dmz with bastion hosts and such.  I am
> running a small lab lan which has a mail server which
> needs some ports open to the world - dns, time, smtp,
> http.  Very few ports are open, very few.
>
> I would like a software solution that ideally runs
> locally.  And just as important, I'd like to make the
> solution available to anyone for free.
>
> Mine is an educational lab.  With source code, or a good
> book or sdk resourses I learn something.  With a hardware
> solution or 3rd party product I just learn another
> install.  If thee were cheap enough cisco routers that
> were programmable, this would be okay.
>
> doug
>
>
> >-----Original Message-----
> >What you are asking for amounts to a firewall.  Try
> something like
> >ZoneAlarm, which is free for personal use (last I
> checked) and blocks what
> >you're interested in blocking.
> >
> >Personally, I would NOT search for source code to compile
> and run because it
> >amounts to running arbitrary binary that someone sent
> you.  Just because
> >it's free source code doesn't make it any less dangerous.
> >
> >I want some assurances on this code's authenticity.
> There may be lots of
> >sample code that compiles on Linux, but how do you know
> that someone hasn't
> >plant'd a trojan horse or virus?  Are you going to
> examine the code
> >thoroughly?  Do you have the skills to do it?  If you
> can't, can you find
> >someone who does?  How can you trust that person, and are
> they taking
> >responsibility for certifying the authenticity of the
> code?  If they
> >aren't -- who will, in the case that there is a virus?
> What about the
> >compiler that compiles your distro -- are you sure it
> doesn't have a trojan
> >horse?
> >
> >-- 
> >//David
> >IIS
> >This posting is provided "AS IS" with no warranties, and
> confers no rights.
> >//
> >"douglas martin" <dsmrtn@pacbell.net> wrote in message
> >news:086601c36b82$6fbddc20$a301280a@phx.gbl...
> >I've read the iissecurity faq's in this.  i have a
> >firewall, I need those TCP Ports open (135-139), but not
> >UPD ports and my firewall isn't that granular.  The port
> >is open or closed.
> >
> >Is there source code (VB, C++, C, C# for either MS VS6
> >or .Net compiles) I can run for my Win2000 server that
> >will allow me to define wich ports and which protocol to
> >filter on so I can selectivel edit pass either pass thru
> >or filter out requests - to block the SPAM POPUPS.
> >
> >Oddly, the ONLY POPUS I get are from companies who admit
> >they are annoying, but visit out site, drop off $25 and
> >you too can download our not quite useful utility so we
> >can programatically stop your Messenger Service, which I
> >kinda want to leave started.
> >
> >I've done searches for several days and while I haven't
> >found any code to prevent problem issues, I've found lots
> >and lotsof code samples (all compilable on linux boxes) to
> >kill and/or main a variety of MS O/S's, Services,
> whatever.
> >
> >If I can get this source code working I promise to offer
> >the source code and/or the binaries FREE to anyone who can
> >do an FTP.
> >
> >Even pointing me to a book and/or SDK that describes the
> >process would be appreciated.
> >
> >Granted, my firewall is mostly just a low-end LinkSys DSL
> >Router, I wouldn't mind upgrading to a router/firewall
> >that allows a real scripting/programming interface to
> >apply pass/fail rules to - provided the router isn't one
> >of the $30K wonder.  Which certainly explains why my
> >router (with only an HTML point/click interface) cost so
> >little.
> >
> >
> >regards,
> >
> >doug
> >
> >
> >.
> >

Relevant Pages

  • Re: Source Code to Filter out WindowsMessenger POP-UPS
    ... Supports Windows 2000 Server. ... Very few ports are open, ... :>sample code that compiles on Linux, ... :>apply pass/fail rules to - provided the router isn't one ...
    (microsoft.public.inetserver.iis.security)
  • Re: adsl router security
    ... if you can if the router is programable ... >> through if they are not addressed to the selected ports. ... >> is minimal of any firewall. ... If you want to filter outgoing packets, ...
    (comp.os.linux.security)
  • Re: Linksys ports ranges filtering question.
    ... But is there some major ports or critical port's ... > ranges that i have to filter in these five line port's range. ... can someone tell me a good configuration of a LinkSys ... Is this the Linksys Firewall Router? ...
    (comp.security.firewalls)
  • Re: Linksys ports ranges filtering question.
    ... > There's only five line to configure my Linksys router to block or to ... But is there some major ports or critical ... > port's ranges that i have to filter in these five line port's range. ...
    (comp.security.firewalls)
  • SECURITY RISK: ZyXEL ADSL Router 642R - WAN filter bypass from internal network
    ... Subject: SECURITY RISK: ZyXEL ADSL Router 642R - WAN filter bypass from internal network ...
    (Bugtraq)