HTFC Forums

H.T.F.C.

How To Fix Computers





Go Back   HTFC Forums > Software Newsgroups > Windows Vista

Register FAQ Members List Calendar Search Today's Posts Mark Forums Read
  #1  
Old 07-06-2009, 12:48 PM
par7133
Guest
 
Posts: n/a
Default On security, in a nutshell..

Here to recap about security (what I can’t do is to realize that you
need it).
Anyway, I recommend you to check your security measures one more time.

1. Run an hardware firewall, this is the best thing you can do.
If you want a brand name, [Netgear: http://www.netgear.com].

Do you own a HDSPA or 3G modem and you feel the waves you
are subject to are enough to think to a wireless router?

You do well! I thought something like that:
[image:http://blog.daniele.bonini.name/public/2009/07/
img-607823b.jpg]

but it still doesn’t exist on the market.. so try to talk about
it.

2. Run Windows Firewall and mainly if you have a HDSPA or 3G
connection.
Not so powerful but it defends you from port scans and ddos
attacks.

3. Run a serious software firewall, [Outpost Firewall:http://
www.agnitum.com] seems alike.
Configures as better as possible the Application Rules for all
your web
applications giving attention to “window control”, “critical
objects”
and “key logging” as other too. Under Firewall, Network rules,
ICMP,
uncheck “echo request”. Under Attack Detection uncheck “Block
intruder IP for”, if the intruder impersonificates your dns server
is
inconvenient to block it; than Customize, Attacks, select all.

4. Run every web application by a downgraded user. This means to
create
a web user with very few authorizations to run your web
applications
only. Doing so you forbid attackers to enter by Opera, IE, Firefox
bugs
with your live and, probably, administrators credentials.

In Windows XP launch apps by holding SHIFT, right click on the
app,
“Run as..”

In Vista download [ShellRunAS: http://technet.microsoft.com/en-us/s...cc300361.aspx].
Ones installed, right click on the app
“Run as different user..”

5. Rename Guest user, and deactivate it, and rename Administrator.
Download [renuser:http://windowsitpro.com/article/articleid/15086/
how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.

6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
laugh..

7. Check out your browser settings. I suggest you [Opera:http://
www.opera.com], as code and plugins
are locked.

8. Download and buy, there is no easy escape, [Fortres 101:http://
www.fortresgrand.com/products/f101/f101.htm]. This software will
definitively lock down the web user created above and all the non
administrator users present in your system.

9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
index.html] appropriately to limit connections (and
map ports).

10 Eventually [change dns settings:http://www.dnsserverlist.org/].
Most of the attacks you receive
are through your dns servers ip impersonifications, indeed don’t
exclude
any morbose friendship alive within your dns servers network.
Eventually
opt for a [script periodically changing your dns settings:http://
tr.im/qV59].
Reply With Quote
Sponsored Links
Fix your Windows Problems - FAST.
FREE Safe Scan Registry Check. Locate & Fix Errors in Minutes!
  #2  
Old 07-06-2009, 12:53 PM
par7133
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..


http://blog.daniele.bonini.name/?p=1889


On Jul 6, 12:48*pm, par7133 <par7...@iperbole.bologna.it> wrote:
> Here to recap about security (what I can’t do is to realize that you
> need it).
> Anyway, I recommend you to check your security measures one more time.
>
> 1. Run an hardware firewall, this is the best thing you can do.
> * * If you want a brand name, [Netgear:http://www.netgear.com].
>
> * * Do you own a HDSPA or 3G modem and you feel the waves you
> * * are subject to are enough to think to a wireless router?
>
> * * You do well! I thought something like that:
> * * [image:http://blog.daniele.bonini.name/publ...-607823b..jpg]
>
> * * but it still doesn’t exist on the market.. so try to talk about it.
>
> 2. Run Windows Firewall and mainly if you have a HDSPA or 3G connection.
> * * Not so powerful but it defends you from port scans and ddos attacks.
>
> 3. Run a serious software firewall, [Outpost Firewall:http://www.agnitum.com]
> seems alike. Configures as better as possible the Application Rules for all
> your web applications giving attention to “window control”, “critical objects”
> * * and “key logging” as other too. Under Firewall, Network rules, ICMP,
> * * uncheck “echo request”. Under Attack Detection uncheck “Block
> * * intruder IP for”, if the intruder impersonificates your dns server is
> * * inconvenient to block it; than Customize, Attacks, select all.
>
> 4. Run every web application by a downgraded user. This means to
> create a web user with very few authorizations to run your web
> applications only. Doing so you forbid attackers to enter by Opera, IE, Firefox
> bugs with your live and, probably, administrators credentials.
>
> * * In Windows XP launch apps by holding SHIFT, right click on the
> app, “Run as..”
>
> * * In Vista download [ShellRunAS:http://technet.microsoft.com/en-us/s...cc300361.aspx]. Ones installed, right click on the app “Run as different user..”
>
> 5. Rename Guest user, and deactivate it, and rename Administrator.
> * * Download [renuser:http://windowsitpro.com/article/articleid/15086/
> how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
> 6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you laugh..
>
> 7. Check out your browser settings. I suggest you [Opera:http://www.opera..com], as *code and plugins are locked.
>
> 8. Download and buy, there is no easy escape, [Fortres 101:http://www.fortresgrand.com/products/f101/f101.htm]. This software will
> * * definitively lock down the web user created above and all the non
> * * administrator users present in your system.
>
> 9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/index.html]
> appropriately to limit connections (and map ports).
>
> 10 Eventually [change dns settings:http://www.dnsserverlist.org/].
> Most of the attacks you receive
> * * are through your dns servers ip impersonifications, indeed don’t exclude
> * * any morbose friendship alive within your dns servers network. Eventually
> * * opt for a [script periodically changing your dns settings:http://tr.im/qV59].


Reply With Quote
  #3  
Old 07-06-2009, 03:03 PM
Alias
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..

JEWboy wrote:
> do you speak English?
> some parts of your post are grammatically wrong


One should start a sentence with a capitalized word and use proper
punctuation. Before you start giving English lessons, learn it yourself
first.

It would also be nice if you could include the post to which you are
replying so your post will make more sense.

Alias
Reply With Quote
  #4  
Old 07-06-2009, 03:42 PM
Jim
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..




Lot cheaper with free programs .


On Mon, 6 Jul 2009 04:48:31 -0700 (PDT), par7133
<par7133@iperbole.bologna.it> wrote:

>Here to recap about security (what I can’t do is to realize that you
>need it).
>Anyway, I recommend you to check your security measures one more time.
>
>1. Run an hardware firewall, this is the best thing you can do.
> If you want a brand name, [Netgear: http://www.netgear.com].
>
> Do you own a HDSPA or 3G modem and you feel the waves you
> are subject to are enough to think to a wireless router?
>
> You do well! I thought something like that:
> [image:http://blog.daniele.bonini.name/public/2009/07/
>img-607823b.jpg]
>
> but it still doesn’t exist on the market.. so try to talk about
>it.
>
>2. Run Windows Firewall and mainly if you have a HDSPA or 3G
>connection.
> Not so powerful but it defends you from port scans and ddos
>attacks.
>
>3. Run a serious software firewall, [Outpost Firewall:http://
>www.agnitum.com] seems alike.
> Configures as better as possible the Application Rules for all
>your web
> applications giving attention to “window control”, “critical
>objects”
> and “key logging” as other too. Under Firewall, Network rules,
>ICMP,
> uncheck “echo request”. Under Attack Detection uncheck “Block
> intruder IP for”, if the intruder impersonificates your dns server
>is
> inconvenient to block it; than Customize, Attacks, select all.
>
>4. Run every web application by a downgraded user. This means to
>create
> a web user with very few authorizations to run your web
>applications
> only. Doing so you forbid attackers to enter by Opera, IE, Firefox
>bugs
> with your live and, probably, administrators credentials.
>
> In Windows XP launch apps by holding SHIFT, right click on the
>app,
> “Run as..”
>
> In Vista download [ShellRunAS: http://technet.microsoft.com/en-us/s...cc300361.aspx].
>Ones installed, right click on the app
> “Run as different user..”
>
>5. Rename Guest user, and deactivate it, and rename Administrator.
> Download [renuser:http://windowsitpro.com/article/articleid/15086/
>how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
>6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
>laugh..
>
>7. Check out your browser settings. I suggest you [Opera:http://
>www.opera.com], as code and plugins
> are locked.
>
>8. Download and buy, there is no easy escape, [Fortres 101:http://
>www.fortresgrand.com/products/f101/f101.htm]. This software will
> definitively lock down the web user created above and all the non
> administrator users present in your system.
>
>9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
>index.html] appropriately to limit connections (and
> map ports).
>
>10 Eventually [change dns settings:http://www.dnsserverlist.org/].
>Most of the attacks you receive
> are through your dns servers ip impersonifications, indeed don’t
>exclude
> any morbose friendship alive within your dns servers network.
>Eventually
> opt for a [script periodically changing your dns settings:http://
>tr.im/qV59].

Reply With Quote
  #5  
Old 07-06-2009, 03:47 PM
ray
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..

On Mon, 06 Jul 2009 04:48:31 -0700, par7133 wrote:

> Here to recap about security (what I can’t do is to realize that you
> need it).
> Anyway, I recommend you to check your security measures one more time.
>
> 1. Run an hardware firewall, this is the best thing you can do.
> If you want a brand name, [Netgear: http://www.netgear.com].
>
> Do you own a HDSPA or 3G modem and you feel the waves you are
> subject to are enough to think to a wireless router?
>
> You do well! I thought something like that:
> [image:http://blog.daniele.bonini.name/public/2009/07/
> img-607823b.jpg]
>
> but it still doesn’t exist on the market.. so try to talk about
> it.
>
> 2. Run Windows Firewall and mainly if you have a HDSPA or 3G connection.
> Not so powerful but it defends you from port scans and ddos
> attacks.
>
> 3. Run a serious software firewall, [Outpost Firewall:http://
> www.agnitum.com] seems alike.
> Configures as better as possible the Application Rules for all
> your web
> applications giving attention to “window control”, “critical
> objects”
> and “key logging” as other too. Under Firewall, Network rules,
> ICMP,
> uncheck “echo request”. Under Attack Detection uncheck “Block
> intruder IP for”, if the intruder impersonificates your dns server
> is
> inconvenient to block it; than Customize, Attacks, select all.
>
> 4. Run every web application by a downgraded user. This means to create
> a web user with very few authorizations to run your web
> applications
> only. Doing so you forbid attackers to enter by Opera, IE, Firefox
> bugs
> with your live and, probably, administrators credentials.
>
> In Windows XP launch apps by holding SHIFT, right click on the
> app,
> “Run as..”
>
> In Vista download [ShellRunAS:
> http://technet.microsoft.com/en-us/s...cc300361.aspx].
> Ones installed, right click on the app
> “Run as different user..”
>
> 5. Rename Guest user, and deactivate it, and rename Administrator.
> Download [renuser:http://windowsitpro.com/article/articleid/15086/
> how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
> 6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
> laugh..
>
> 7. Check out your browser settings. I suggest you [Opera:http://
> www.opera.com], as code and plugins
> are locked.
>
> 8. Download and buy, there is no easy escape, [Fortres 101:http://
> www.fortresgrand.com/products/f101/f101.htm]. This software will
> definitively lock down the web user created above and all the non
> administrator users present in your system.
>
> 9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
> index.html] appropriately to limit connections (and
> map ports).
>
> 10 Eventually [change dns settings:http://www.dnsserverlist.org/]. Most
> of the attacks you receive
> are through your dns servers ip impersonifications, indeed don’t
> exclude
> any morbose friendship alive within your dns servers network.
> Eventually
> opt for a [script periodically changing your dns settings:http://
> tr.im/qV59].


Or simply install and run Linux and don't worry about it.
Reply With Quote
  #6  
Old 07-06-2009, 04:13 PM
JEWboy
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..

do you speak English?
some parts of your post are grammatically wrong
Reply With Quote
  #7  
Old 07-06-2009, 04:31 PM
Over Easy
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..


"JEWboy" <satanpennus@fokfreetrade.com> wrote in message
news:ui3t4Ek$JHA.3544@TK2MSFTNGP04.phx.gbl...
> do you speak English?
> some parts of your post are grammatically wrong


Do you speak COMPUTER? You don't even have the brains to fix your system
clock. I suggest calling tech support and they will have someone walk
through the steps to make that correction. HA HA HA HA

Loser.


Reply With Quote
  #8  
Old 07-06-2009, 04:32 PM
Over Easy
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..


"Alias" <iamaliasTAKETHIS@OUTgmail.com> wrote in message
news:h2t07v$kmb$1@news.eternal-september.org...
> JEWboy wrote:
>> do you speak English?
>> some parts of your post are grammatically wrong

>
> One should start a sentence with a capitalized word and use proper
> punctuation. Before you start giving English lessons, learn it yourself
> first.


How about this? **** You. Is that correct?

>
> It would also be nice if you could include the post to which you are
> replying so your post will make more sense.
>
> Alias



Reply With Quote
  #9  
Old 07-06-2009, 04:36 PM
Alias
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..

Over Easy wrote:
> "Alias" <iamaliasTAKETHIS@OUTgmail.com> wrote in message
> news:h2t07v$kmb$1@news.eternal-september.org...
>> JEWboy wrote:
>>> do you speak English?
>>> some parts of your post are grammatically wrong

>> One should start a sentence with a capitalized word and use proper
>> punctuation. Before you start giving English lessons, learn it yourself
>> first.

>
> How about this? **** You. Is that correct?


I'm man enough if you're woman enough.

Alias
>
>> It would also be nice if you could include the post to which you are
>> replying so your post will make more sense.
>>
>> Alias

>
>

Reply With Quote
  #10  
Old 07-06-2009, 04:38 PM
Over Easy
Guest
 
Posts: n/a
Default Re: On security, in a nutshell..


"Alias" <iamaliasTAKETHIS@OUTgmail.com> wrote in message
news:h2t5lq$4du$4@news.eternal-september.org...
> Over Easy wrote:
>> "Alias" <iamaliasTAKETHIS@OUTgmail.com> wrote in message
>> news:h2t07v$kmb$1@news.eternal-september.org...
>>> JEWboy wrote:
>>>> do you speak English?
>>>> some parts of your post are grammatically wrong
>>> One should start a sentence with a capitalized word and use proper
>>> punctuation. Before you start giving English lessons, learn it yourself
>>> first.

>>
>> How about this? **** You. Is that correct?

>
> I'm man enough if you're woman enough.
>
> Alias
>>


Sorry. I'ts a heavy FLOW DAY! LOL!



Reply With Quote
Sponsored Links
Fix your Windows Problems - FAST.
FREE Safe Scan Registry Check. Locate & Fix Errors in Minutes!
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads
Thread Thread Starter Forum Replies Last Post
Security Tab Samuel Windows XP 1 10-06-2008 07:56 AM
SP1 Update in a nutshell (sort of) Trevor Windows Vista 3 03-22-2008 03:51 AM
Security services for security center is turned off.... How...? pavo_roddy Windows XP 1 03-21-2008 11:26 PM
Windows Security vs Norton Security Janey Windows Vista 3 11-16-2007 04:00 PM
"Replacing invalid security id with default security id " EnigmaSFS Windows Vista 1 07-15-2007 08:18 PM


All times are GMT. The time now is 10:49 AM.


Powered by vBulletin® Copyright ©2000 - 2009, Jelsoft Enterprises Ltd.
Search Engine Friendly URLs by vBSEO 3.2.0
© 2004 - 2007 Web-S-Sense Pty. Ltd. Usenet and forums posts © their respective authors.
Ad Management by RedTyger