Re: Firewall

From: Jeff Cochran (jeff.nospam_at_zina.com)
Date: 05/21/05

  • Next message: David.H: "Ask for shuting down" 
    Date: Sat, 21 May 2005 01:55:25 GMT

    On Fri, 20 May 2005 05:02:01 -0700, "vincenta" <vincenta@mail.com>
    wrote:

    >Has anyone figured out a great way to know which Firewall requests to permit
    >or not?

    Block everything. When something doesn't work, look at your firewall
    logs and adjust the firewall to allow it to work.

    Jeff

  • Next message: David.H: "Ask for shuting down"

    Relevant Pages

    • Re: lists of url
      ... Assuming IIS, the IIS logfile would be your first stop. ... Your firewall ... logs should also show this. ... Jeff ...
      (microsoft.public.inetserver.iis)
    • Re: Strange WAN Activity
      ... > firewall logs for a possible TCP FIN scan that keeps ... > company's intranet server IP and its port 80 across our ... > My firewall is a Sonicwall Pro 200 and I'm running W2K ... It's difficult to be sure without inspecting the web server for signs of ...
      (microsoft.public.win2000.security)
    • Re: Winvnc hack! [25 KB]
      ... came in from a service such as IIS that logs IP address. ... Check your IIS ... Some firewall software such as ... You can also use the NETSTAT -A command that comes with Windows to look at ...
      (microsoft.public.win2000.security)
    • RE: [fw-wiz] Log checking?
      ... tend to evaluate where and what logging is important in a different light. ... I've been happy to analyze a year's worth of firewall denied logs, ... have denied firewall traffic logs or denied logs with any relevant data. ...
      (Firewall-Wizards)
    • Re: false portscan alarm
      ... What is the reason of that treffic? ... and the browser and/or the "personal firewall" had decided to close those ... which each have a local source port above 1024 opened outgoing to port 80 ... I've had a dig through my own PIX logs, and while there is nothing for today ...
      (comp.security.firewalls)