Re: Pop-ups, Pop-ups, etc. only on XP
From: Alun Jones [MS MVP] (alun_at_texis.com)
Date: 07/15/03
- Next message: Alun Jones [MS MVP]: "Re: Microsoft's Messaging Service Abused With ADS!!!"
- Previous message: Alun Jones [MS MVP]: "Re: Messenger Service"
- In reply to: Justin Rovang: "Re: Pop-ups, Pop-ups, etc. only on XP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Tue, 15 Jul 2003 19:59:32 GMT
In article <q2BQa.52514$OZ2.9275@rwcrnsc54>, "Justin Rovang"
<thinice@programmer.net> wrote:
>Yes, a patch for messenger so outside IP's cannot utilize it in a malicous
>manner;
You obviously haven't run a network monitor scan on the packets that come in
- they're forged, and so the source address is not necessarily outside of
your network. Any patch that works the way you suggest would occasionally
pass through messages - an unreliable patch is no patch at all.
>"It is not needed since adequate tools have always been a part of Windows
>XP.";
>Are you saying the Messenger service is not needed? Please clarify;
A patch to the Messenger service is not needed, because there's a firewall
in Windows XP.
>Adquate tools? I'd rather not enable ICF because I'm running a webserver;
A web server that isn't behind a firewall is a risk waiting to happen. You
don't have to enable ICF - you could use whatever firewall is built into
your router. Just make sure that you block all ports except for those that
your web server uses (80, 443, usually). I don't recommend allowing all
ports except those known to be a problem, because that's historically proven
to be a bad security methodology.
>And I'd rather not disable Messenger service because it comes in handy for
>it's purpose.
>I do have a firewall but it still doesn't block this misuse;
>which brings on a question... can I allow/disallow specific ports in WinXP
>without installing a 3rd party app?
Your firewall doesn't block this? Your firewall is, to put it blankly, not
much of a firewall. Now, if you're saying that you don't know how to
configure it to block this, then that's one matter, but if your firewall
can't be configured to refuse all incoming data except for those on a few
acceptable ports, then it's useless.
Even little old ICF can be configured to accept or reject packets on certain
ports.
Alun.
~~~~
- Next message: Alun Jones [MS MVP]: "Re: Microsoft's Messaging Service Abused With ADS!!!"
- Previous message: Alun Jones [MS MVP]: "Re: Messenger Service"
- In reply to: Justin Rovang: "Re: Pop-ups, Pop-ups, etc. only on XP"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
