Firewall Wizards mailing list archives
Re: Firewalls that generate new packets..
From: Darren Reed <Darren.Reed () Sun COM>
Date: Tue, 27 Nov 2007 21:07:11 -0800
Paul D. Robertson wrote:
On Tue, 27 Nov 2007, Paul Melson wrote:in both directions. State tables allow your firewall to have a deny-all default inbound policy and an allow-all default outbound policy. They allowWith today's proliferation of Trojans and Spyware, anyone with a Windows user population above three who has an allow-all default outbound policy is an idiot and populations of one to three are likely candidates for the club if not associate members.
To give you an idea of how bad this problem is, I recently did a fresh install of Microsoft Windows XP + Service pack 2 (I hadn't caught up with all of the patches yet) and experimented with surfing the Internet like a normal user - default security settings for Internet Exploder. Half a dozen web sites later - no more - and spyware had installed itself into winlogin. Removal? Safest bet will be a format. How did it get there? I suspect some popup ad with nasty javascript/activex. Now what percentage of the Internet population does this represent? Port 80/443 restrictions mean nothing. Darren _______________________________________________ firewall-wizards mailing list firewall-wizards () listserv icsalabs com https://listserv.icsalabs.com/mailman/listinfo/firewall-wizards
Current thread:
- Re: Firewalls that generate new packets.., (continued)
- Re: Firewalls that generate new packets.. Darden, Patrick S. (Nov 29)
- Re: Firewalls that generate new packets.. Timothy Shea (Nov 29)
- Re: Firewalls that generate new packets.. Darden, Patrick S. (Nov 30)
- Re: Firewalls that generate new packets.. Marcus J. Ranum (Nov 30)
- Re: Firewalls that generate new packets.. Paul D. Robertson (Nov 27)
- Re: Firewalls that generate new packets.. Anton Chuvakin (Nov 27)
- Message not available
- Re: Firewalls that generate new packets.. Marcus J. Ranum (Nov 27)
- Re: Firewalls that generate new packets.. Anton Chuvakin (Nov 28)
- Re: Firewalls that generate new packets.. jason (Nov 27)
- Re: Firewalls that generate new packets.. Patrick M. Hausen (Nov 28)
- Re: Firewalls that generate new packets.. Darren Reed (Nov 28)
- Re: Firewalls that generate new packets.. Timothy Shea (Nov 28)
- Re: Firewalls that generate new packets.. Paul Melson (Nov 28)
- Re: Firewalls that generate new packets.. Paul D. Robertson (Nov 28)
- Re: Firewalls that generate new packets.. Darren Reed (Nov 28)
- Re: Firewalls that generate new packets.. Patrick M. Hausen (Nov 28)
- Re: Firewalls that generate new packets.. Darren Reed (Nov 28)
- Re: Firewalls that generate new packets.. Patrick M. Hausen (Nov 29)
- Re: Firewalls that generate new packets.. lordchariot (Nov 29)
- Re: Firewalls that generate new packets.. Cat Okita (Nov 26)