Printable View
Thanks MsM
Technically...they are still software...as it is software that filters it.
I have had this discussion before ;)
Personally I always recommend an external device....as stated before...frees up resources on the machine...and also adds that extra layer
MLF
Hey Hey,
So my belief has always been that if you have to ask if it's enough protection... You really don't know enough about your PC to properly protect it... Now trying to be insulting but that's usually the truth... That sort of question is reminiscent of the home user talking to their local tech company who's come out to fix their PC... generally it means pay someone else to take care of your computer.. Offer your neighbours kid $50 bucks to secure your computer... He'll have to come over after dark because "the sun is trying to kill him" (that's gotta be why he hides in their basement all the time right?)... but he'd prolly do a better job...
However, when you think about it... most of what you've asked us about isn't really protection... A lot of it is reactive... AdAware... Spybot... That's reactive software, not proactive.. Even AV is usually reactive (as it relies on known signatures for the most part)... mind you NOD32 did just recieve kudos for being able to detect blackworm using heuristics.
If you're thinking true protection... you have to be proactive.... so what is out there that's proactive...
Firewall software... (depending on which one you use)... One that will allow you to create custom rules, etc... that can be proactive... speaking of which I've heard good things about Core Securities latest release of Force (http://force.coresecurity.com/)... Mind you even with a good firewall, you still can't be a mind reader and predict the future... anything could happen.
Registry Protection Software... MS Defender (AntiSpyware) offers some registry protection... RegProt from DiamondCS offers Registry Protectin... they notify you of every change... thus being proactive instead of reactive and removing the links afterwards...
Hardening your system... Remove unneeded services... and unnecessary startup applications. there are plenty of "Windows Hardening programs out there" that will adjust registry values so you don't have to play yourself.. HardenIT is one of them...
Do you have a router in front of your PC??? That will provide protection against incoming threats...
The possibilities are damn near endless.... However... think a bit... use your mind... Ever heard if you don't use it you lose it? It explains a lot of our members I think :D but there is some truth in it... Do some research... come back with a formulated plan not just I run this what else do I need... There are some vital questions you have to answer and factor into the equation..
What do I do with my computer?
What sort of websites do I browse?
How comfortable am I with PCs?
How many people use my computer?
etc...
You could also take some protactive measures like locking down the user accounts... never running as admin... things like that...
Go... Live, Love and Learn.. and play around.... back up your important data and then if you screw up it's no big deal....
Peace,
HT
I agree. Everyone is saying that he might want to go through drastic measures to lock down his PC. That may not be the wisest (or capable) option here.Quote:
Originally posted here by HTRegz
So my belief has always been that if you have to ask if it's enough protection... You really don't know enough about your PC to properly protect it...
-Deeboe
I think HT has hit the nail on the head
MLF
Quote:
Originally posted here by morganlefay
Thanks MsM
Technically...they are still software...as it is software that filters it.
I have had this discussion before ;)
Personally I always recommend an external device....as stated before...frees up resources on the machine...and also adds that extra layer
MLF
When you think about it, you are exactly right - a hardware firewall isn't really 'hardware', just an external device running some firmware - good point... And as you say, running that external device is recommended from a resource standpoint...
As far as locking down your system, the guides that MsMittens linked to are a pretty good start....... Also, I was thinking that there was a member here who set up a server that was simply a hardened Windows box with no firewall and put forth the challenge to the community to try and 'hack' the box... I could be way off base with this, but I'm remembering that any attempts to 'hack' the box were unsuccesful.... Does this ring a bell to anyone else?
I seem to recall this as well. I believe it was Noia who did so.Quote:
Also, I was thinking that there was a member here who set up a server that was simply a hardened Windows box with no firewall and put forth the challenge to the community to try and 'hack' the box... I could be way off base with this, but I'm remembering that any attempts to 'hack' the box were unsuccesful.... Does this ring a bell to anyone else?
I have a Windows 2000 box with no AV and no firewall that will be up soon. I just have to get a new NIC for it. I will allow the public to try and break in. It will be on 24/7, but you will have to register with me to get the IP.
Once I get d0ppy.com running, it'll be at rootme.d0ppy.com
It's difficult to get stuff done around here with the new baby and all, so it may be a few weeks.
Peace
EDIT:
Depends on whether you mind losing system resources by loading an possibly exploitable process. If your machine is properly locked down, adding a firewall gives an attacker a possibly easier way in.Quote:
it never hurts to have just a little more for the services you don't know are running
I could of swarn it was the Duck that was running it, and the winner was offered the box used in the game as the prize.Quote:
Also, I was thinking that there was a member here who set up a server that was simply a hardened Windows box with no firewall and put forth the challenge to the community to try and 'hack' the box... I could be way off base with this, but I'm remembering that any attempts to 'hack' the box were unsuccesful.... Does this ring a bell to anyone else?
but then again there have been a few of these type games ran on Ao that it get's confusing on whom did what.
What type of game are you planning it to be dopp.?.Quote:
I will allow the public to try and break in. It will be on 24/7, but you will have to register with me to get the IP.
capture the flag, or a type of hack this site type of game.?.
either way it sounds like a fun project to be setting up.
cheers
front2back
Essentially, the goal is to gain administrator rights to the machine. You'll probably have to post a file off of it or something.
The entire thing is still being planned out as I bring the network back up.
I would suggest you get a firewall. Please do everything you can to harden your box (turn off services you aren't using, etc). But you need a firewall. It is an extra layer of protection. You never know what new exploit will come into play. A proper firewall can keep most script kiddies from knowing you're there in the first place. There is no need to take unnecessary chances.
Ugh... I seem to have to repeat myself alot....
Script kiddies are no threat to a properly secured box. You in no way NEED a firewall. It offers limited protection, in exchange for a loss of system resources and the addition of an exploitable service.