Re: pop up ads

From: Karl Levinson [x y] mvp (levinson_k@excite.com)
Date: 12/04/02 

From: "Karl Levinson [x y] mvp" <levinson_k@excite.com>
Date: Wed, 4 Dec 2002 16:55:54 -0500

Did you read http://securityadmin.info/faq.htm#pop-ups ? The answer is
described there.

You can disable the Messenger service, but if you do, your computers are
still vulnerable to anonymous login ID enumeration from the internet. If
you don't want a firewall in front of these machines [which IMHO is crazy,
especially where you don't already know forwards and backwards how to harden
a windows computer and keep it hardened], you could disable Client for
Microsoft Networks and/or Netbios over TCP/IP on the internet-facing network
interface, and/or set the RestrictAnonymous registry value to 2 [search
www.microsoft.com/support for RestrictAnonymous for more information],
and/or use IPSec or TCP/IP Filtering or personal firewall software or a 3com
network card with integrated firewall and/or the upstream router to block
TCP and UDP 135 through 139 and 445 [or better yet, every port from 0 to
65535 TCP and UDP except for those that you are specifically using]. I am
personally not crazy about IPsec and TCP/IP filtering features that come
with Windows, as there is no logging, alerting or intrusion detection, which
makes it hard to troubleshoot when it is blocking a certain app from working
and hard to research

Then, you should continue hardening your servers using the instructions and
checklists below, because there are other vulnerabilities:

http://securityadmin.info/faq.htm#firewall [also describes how to enable
IPsec or TCP/IP filtering features of Windows if you choose to use those]
http://securityadmin.info/faq.htm#harden

Among other hardening techniques listed at the URLs above, I would highlight
the free file checking software at www.gfi.com... very helpful in detecting
intrusions, and it's free.

Really the best solution is to use a combination of all of the above, in
order to achieve defense in depth.

"Joseph Sarosy" <jsarosy@hotmail.com> wrote in message
news:ON3lDO7mCHA.672@TK2MSFTNGP08...
> Thanks for the info and we actually do have a firewall, but we have a
couple
> of servers that we want exposed to internet. Any idea how to block the
> specific problem?
> "Karl Levinson [x y] mvp" <levinson_k@excite.com> wrote in message
> news:ucr0UZ6mCHA.1604@TK2MSFTNGP08...
> >
> > "Joseph Sarosy" <jsarosy@hotmail.com> wrote in message
> > news:eyoRLU6mCHA.1256@TK2MSFTNGP12...
> > > We have a few windows 2000 servers that are multi homed to our
internal
> > > network and to the internet with public IP addresses. Recently, we
have
> > been
> > > receiving numerous pop up ads on them through the windows messaging
> > service.
> > > How can I prevent this? I still want internal messages to get through.
> >
> > You really really really should have some sort of firewall between your
> > computers and the internet. With your current setup, hackers can
probably
> > connect to your computer, get lists of the login IDs and share names on
> your
> > computer and start guessing passwords to login. Firewalls are cheap or
> > free, so there's no excuse not to. Here are some free and not-free
> options:
> >
> > http://securityadmin.info/faq.htm#firewall
> >
> > More information:
> > http://securityadmin.info/faq.htm#pop-ups
> > http://securityadmin.info/faq.htm#harden
> >
> >
> >
> >
>
>

Relevant Pages

  • Re: avast
    ... > Just did a clean installation of xp pro sp1 and download 'avast anti ... Did you firewall before connecting to the internet? ... Internet and patch with the critical updates? ... Why you should use a computer firewall.. ...
    (microsoft.public.windowsxp.general)
  • Re: XP NOT RESPONDING
    ... Did you have a firewall going before connecting to the internet? ... Microsoft has these suggestions for Protecting your computer from the ... Why you should use a computer firewall.. ... are pay - some you can only download if you are registered - but it is best ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: Security Alerts Driving Me INSANE!
    ... The only reason, really, that you need a firewall and antivirus software is ... because you use the Internet with your computer. ... cleaned up and considered a hardware upgrade or three. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: firewall
    ... You need to do a lot of reading about ipfw ... IPFW is the only firewall available to FBSD, ... rules do not function correctly on a DSL or cable internet ... @320 pass in quick on rl0 proto tcp from 63.70.155.0/24 to any port ...
    (freebsd-questions)