Re: User Accounts - Internet and Firewall Problems

From: Gaya (gaya4_at_freenet.de)
Date: 07/03/04


Date: Sat, 3 Jul 2004 08:00:14 -0700


>-----Original Message-----
>"Gaya" <gaya4@freenet.de> schrieb im Newsbeitrag
>news:2504901c4607f$2e85a4c0$a601280a@phx.gbl...
>> Hello, i like to learn from Windows XP as a hobby, and
>> knowing folders like my room;) my problem is now: i have a
>> new user account, which is just restricted to use some
>> programs, internet, and chatting, in order to connect
>> WITHOUT a firewall to the internet. so that no
>> worm/virus/dialer could install itself in the windows
>> system. wrong thought. well i can remove them one by one,
>> and i can evenstop iruses to do it. they use mainly
>> tftp.exe and ftp.exe for transferring to my computer. i
>> removeed those two exes from my system, backupped. without
>> them i can do everything i want, but i cannot connect well
>> to internet, seems logical. sometimes(rare) it works as
>> well, and i do not get worms. when i switch the firewall
>> on, everything works normal and perfect. my question is how
>> i can get safely online with windows xp pro, and no
>> firewall with restricted user? i disabled many services,
>> and deleted some users from security administrations, i
>> have worked in the group policy settings as well. now i
>> dont have much more to try. please help! a friend got
>> windows 2000 and just restricted anyprogram he doesnt use,
>> and it works fine with him. is windows xp just too "open"?
>> thanks for any help!
>[-]
>Putting the words "safely" and "online" in one sentence
makes for a nice
>joke, really. It simply doesn't matter what system you use
-- you aren't
>safe while someone or something can talk to your machine
and the really
>good ones are able to break into and use your machine
without leaving a
>trace.
>
>Now you can put restrictions on applications with XP, too,
still having
>a connection to the Internet without, at least, the built
in firewall
>enabled just isn't a good idea. Simply do a netstat -a to
see what's
>still listening and you'll see that even disabling various
services
>isn't the final solution.
>
>To be safe, or as safe as it is possible without too much ado:
>
>You don not need to be Administrator for your daily work,
so use a
>restricted account.
>Enable XP's firewall for all your connections.
>Install or let XP install all relevant updates.
>Do not use IE for surfing.
>Disable Outlook's preview window.
>Switch Outlook offline before reading your email.
>Use text format for mail and news.
>Use your brainware as to install a dialer for instance it
does need
>someone to agree to the installation.
>
>If you want a more in-depth guide you may download the
"Guide to
>Securing Microsoft Windows XP" white paper from the NSA's
site. Not a
>step-by-step guide, but makes for an interesting read.
>
>Cheers,
>Juergen
>
>.
>
Danke Jürgen:)
I have no internal Firewall in use. the one i use is Zone
Alarm, as i was ever satisfied, but now i dont want any
Firewall. i already dont use any Microsoft Program besides
Windows itself, and the fast Notepad. The dialer or elses
Software gets just into my system, and some cause Buffer
overflows, so the System restarts with lsass.exe shutdown.
If not, i have the cmd, tftp and ftp exe working often
using the CPU completely. Closing different Ports wont work
i believe. I dont assume anybody to get into my Computer,
if so, i dont care very much, because i dont have any
important data. its so to say, just for learning:) With or
without Firewall anybody can get onto my Computer, but i
believe if it works in win2k with restricted user, it
should work in win xp as well. thanks for more help:)



Relevant Pages

  • Re: Guide to secure installtion of IIS 5
    ... don't forget a well-configured firewall. ... Do not put the computer onto the network or the Internet until after the ... Follow the instructions for hardening Windows and IIS at ... Install all service packs and security fixes from Microsoft and otherwise ...
    (microsoft.public.inetserver.iis.security)
  • Re: login attempts
    ... > Every day i have on my win2000 iternet server a lots of wrong login ... Windows by default allows ... You also need a firewall. ... the internet, except for those ports you know you're using. ...
    (microsoft.public.win2000.security)
  • Re: SP2 problem connecting to web after instal
    ... > I've just installed SP2 after downloading all Windows updates first. ... > installed from CD after checking with Microsoft that I didn't have any ... > As soon as it finished installing, I disabled their firewall, as I ... > I've checked my Internet settings which seem OK. ...
    (microsoft.public.windowsxp.general)
  • Re: password protection
    ... and cable] and should really consider Windows 2000 / XP. ... sure you're also running antivirus and firewall, ... Internet] to bypass this security. ...
    (microsoft.public.security)
  • Re: Will computers ever be as simple and reliable as a refrigerator?
    ... The problem is that a refrigerator does ONE thing.. ... Your computer is not connected to the Internet. ... using Windows XP "prettifications". ... Why you should use a computer firewall.. ...
    (microsoft.public.windowsxp.help_and_support)