Printable View
1- can zone alarm be strengthened to prevent some exploits?
2- I have a TC monitor It has informed me that my projector proccess ID has been changed constantly.is that a problem?
3- Is there any other software that can be had besides a firewall to enhance security when a hardware firewall in't an option?
4- can you leave trapps for "visitors"?
please help if you can. thank you
:confused: I don't think that ZoneAlarm was intended to be "strengthened" in the manner you desire.
I'm not a windoze person but I have seen these so-called products and I'm not impressed.
Think iptables for Linux .... or packet filtering (ipfilter) for Solaris/HPUX
Trapps? Why would you want to? That's not nice. You could find yourself under DoS as retaliation. Never provoke the unknown, these guys out there are best left to their own devices. But if you must provoke your "visitors", try embedding them in your HTML pages, or use Psionics PortSentry (for Unix!) and be sure to read your logs!!
I will say it again if you can get a hardware based firewall . i agree with silere in the fact that ipchains linux based firewalls can be fortified , as for zone alarm its only as secure as the os its on . as for honey pots there a good way to learn any questions email me.
I CREATED A BOT TO MSG OUR FRIEND VERUSHKA TO TELL HER TO GET OFF OF IRC AND TO CALL ME ON THE TELEPHONE. I DO NOT GO ON IRC SO I CANNOT CHECK TO SEE IF THE BOT WORKS ALTHOUGH 1 PERSON MSGD IT. I AM SUPPOSING IT IS BANNED FROM THE CHANNEL BECAUSE I MADE IT FLOOD. SHE IS STILL NOT ANSWERING HER PHONE. MY CLEVER PLAN IS A FAILURE.
here goes a dumb A** question
so is it possible to run two firewalls?
if it is would it just be redundant based on the "2 condoms is just as good as one theory?"
as far as traps for hackers, sure, you can do that. They are usually refered to as honeypots. some more info can be found at...
http://www.sans.org/newlook/resource...Q/honeypot.htm
http://www.all.net/dtk/
http://www.net-security.org/text/art...honeypot.shtml
http://project.honeynet.org/papers/honeynet/
http://www.rootprompt.org/article.php3?article=210
good luck,
IchNiSan
Yeah its possible to run 2 firewalls example a friend of mine has black ice and zonealarm running on the same box it is possible in fact the guy who got me interested in the infosec field told me that he had a webramp firewall with checkpoint running as a security server with an open source intrusion detection system , not to say that any system is inpenetrable but this one comes close.
hope that helps
EviL Elf hapy new year
a good security book is active defense by chris bewnton its at www.sybex.com
:) - If you are using the first firewall (fw) as a gateway to the DMZ (that you obviously plan to set up ...) and the 2nd fw as another gateway to the internal network - YES!! Your network will be secure. If the first fw is breached then only the hosts in the dmz will be at risk. But the security is only as good as the implementor.
Running two fw on the same machine is nonsense. That is a false sense of security.
I agree with EvIl eLf that no system is impenetrable.
Actually after doing some checking around, the hardware solutions such as SMC Barricade (high reccommended) and the not so great Linksys, these run a version of Linux kernel. So if these use ipchains of iptables - you could set up a solid defense.
And these solutions are cheap .... but if you really want to learn get a Linux/Solaris box.
You can also use something like Clark Connect software run it on an old PC with two NIC's. It NATs and firewalls and has a couple of other cool features like dynamic DNS (for those of you on DHCP). www.clarkconnect.org
Or for a little fun while staying secure run LABrea@home it tarpits (holds them indefinitely) baddies trying to get to you ( for Winblows users.)
I've held on to as many as 200 connections for over 12 hours and I'm only using around 3k of bandwidth.
so basically get another comp to be a decoy/blocker or im not all that secure?
If it is possible to find exploits in a program shouldn't it be equally possible to correct them? if not then why?
thank you for bearing with my ignorance
any old pc will do, I have a 120MHz Pentium with 64MB RAM, it's got 2 NICs, the cable modem is attached to the first nic, and the other nic goes into my switch where other pcs are connected. If you want a dmz - a third network card is required and a second switch as well. A second firewall will complicate the issues and require more hardware that, in the end - it it really worth it at home?
Then you got to close down all unnecessary ports, config the hosts.deny, hosts.allow, set up iptables rules, install/config other pieces - eg squid or apache, maybe a socks5 proxy.
This applies to either Linux or Solaris (but note that you need ipfilter for Solaris)
An exploit in unix can actually be more difficult to fix, since some system services may depend on them e.g. port 111 - if you don't know check out www.securityspace.com advisories and www.cert.com as well.
gcc4120b : I use a similar setup @ home, it works great and is secure enough for home use.
T-sight, all you need to know... It logs what happens, all keystrokes that are entered in any shell or account. at realtime speed to. Playbacks of hack attempts are great for playing back at your next LAN party
For a hardware firewall if you want to spend some $$$ you can get a webramp firewall router with statefull inspection you can have checkpoint installed as a management console to edit the rulesets on the webramp its on sale at www.ebay.com
the correct cert site is www.cert.org.
EviL ElF
Oh yeah remember no firewall is Cracker proof so do not only rely on a firewall for protection the greatest friend a hacker can have hacker meaning us who experiment with systems in all there glory, nuff said , check your logs if you have windows 2000 set the local security to log everything missed log on attempts contrary to popular thoughts most not all password crackers leave behind foot prints, if you can disable trusts in the registry .
If you have unix install snort it will monitor for attack patterns and download a portscanner attack your own system , one last thing before i stop typing make sur you firewall can check for spoofed packets that is when an attacker uses one of your internal ip addresses to attack you network .
happy new year this is my year
EvIl ElF
Again, thank you! I have gone as far as to get a computer from my friend that he didn't want lying around anymore to expirament with. But it looks like I'm begining to put the cart before the horse. I definitly need to learn why all of these programs do what they do and how they tick. Otherwise I may end up in possesion of the artillery but no knowledge it its implementation. I attempted to find an easy online tutorial so that I may learn some programing languages but it looks like I'm going to have to break down and use an elective and just take the class.
By the way while I was looking around I did find an HTML tutorial that uses the hold your hand /at your own pace method of teaching(exactly what I was looking for). I understand that it isnt a language but until now I didn't know anything about it so atleast it's progress. You'll find it at www.htmlbasix.com
Thank you
Well it is begining to appear that I have put the cart before the horse. I am definitly in need of a programing language course. I did however get a computer from a friend to begin expirimenting with. I tried to find a tutorial online that was made for people who have no background in programing. Thus far I have had no luck.I may have to break down and just use an elective and take a class for a semester or two.
While I was snooping around I did manage to find a site that was a step by step how to on HTML. The site even gives you some space to start your own work and gives you lesons to complete and turn in for critique. If interested you can find it at www.htmlbasix.com
Thank you again
I havesome pdf files on c++ and perl as well as ughhhhhh vb
you can get them off of kazaa so have fun if you have an instant messenger we can possibly trade info i also have a sleu of security ebooks so if you want to trade let me know what you have if you have.
EvIl