Printable View
Hey, I am new to this hacking and security stuff. I don't woant to hack people, I was just wondering if my file and print share is acessible from a browser or do you need a special program? Also, what firewall would be a good one to stop hackers?
Thanks guys..............
Now I'm not too sure on this, but I think that to allow file and printer sharing through a browser, you need IIS (Internet Information Services - assuming your using Windows). I don't think it's installed by default, so you'll need to chuck in the CD and select it in Accessories somewhere.Quote:
I was just wondering if my file and print share is acessible from a browser or do you need a special program?
I wanted file sharing thru a browser as well on my PC and I found out I needed to install IIS, which I did, but then it still didn't work. In the end I realised that it was my ISP that prevented it due to their firewall.
Onto the firewall question now. Well, I've heard many great things about ZoneAlarm that I needed to get it myself, which I did about one week ago and find it really great. It blocks basically everything unless you tell it not to block it. Everything it blocks, it comes up with a pop-up msg telling you what has been blocked and the originating IP address (clicking 'more info' goes to their website with more details on what has happened).Quote:
Also, what firewall would be a good one to stop hackers?
I thought my PC was safe with WinXP's built-in firewall...how wrong I was.
Greg
Try ZoneAlarm if you need protection and don't know a lot about firewalls and how to configure them. ZoneAlarm is free.
http://www.zonelabs.com/
If you are into configuring things, and know what you are doing, get Tiny Personal Firewall. It is also free.
http://www.tinysoftware.com/
Do not get Black Ice Defender, which is not free, and has had security holes in it.
if your really paranoid you can use both zonealarm(or Tiny) and black-ice together. This will supply ample amounts of protection and information on any would be attackers.
Or you can use a hardware firewall...
About port 139 (in Win9X/ME)... you don't need special progs to access...if you enabled file and printer sharing and the right protocols are binded to that (and you share your drive local) then you are sharing your whole HDD to the net.
don't bind TCP/IP to the file sharing service from M$
look at www.GRC.com on how to bind / unbind / install protocols and services.
get sonicWALL excellent firewall! Zonealarm is good but it easy to bypass it... ALSO A GREAT WEB SITE TO GO TO IS HACKERWHACKER.COM AND DO A SCAN ON YOUR SYSTEM!
been a while since I thought about this kind of issue,
but,
If someone knows your IP address, they could open a dos prompt and type
net use \\Insert.your.IPaddress.here\nameofshare
and have an open connection to your shares or printers(of course there might be a password/username they need to connect, but that is a different issue.)
All someone needs to connect to your shares is a dos prompt. Unless you are behind a firewall, or are running a firewall on your machine.
try out
Tiny Personal Firewall at
http://www.tinysoftware.com/home/tin...pg=tpf_summary
or Zone Alarm from
http://www.zonelabs.com
good luck,
ichnisan
u can close ur computer netbios:)
good luck:)
If you want to have file sharing through a browser, why not use an FTP server (I thought IIS came with one, but I'm not sure 'cause I use Apache on Windows as well as Linux for my http server and I don't use an FTP server on Windows for security reasons.)
If, on the other hand, you don't want file sharing through ANY way at all, use a firewall such as Zone Alarm on High security settings (default for internet zone)... this should block access to ports 135,137-9 and 445... all of which have some role in Windows File & Printer Sharing (NetBIOS)
I dont know what OS your running but if u get Windows2000 pro it comes with whats known as Terminal Server
when you have Terminal Server active you can go to a browser and type in the terminal server address you set it and then u actualy see that computer in the browser and if u want u can full screen it so where your actualy USING that computer just using your screen...... i love that feature personaly :)
I used to terminal server to a REALLY powerfull server my friend had, it was great cus i use that wonderfull machine and it didnt have to sit at my house :)
I hope this helps
As far as firewalls: I like Blackice Defender and Zonealarm.
Thanks guys this really helps. I need the File share but I will get zonealarm and tiny. I really appreciate this
Sorry I wasn't specific bout my comp and os next time I will.
go to https://grc.com/x/ne.dll?bh0bkyd2
take the shields up test and the port probe
it'll tell you about any blatent security holes
I am a bit partial to AtGuard Personal Firewall.
AtGuard is no longer free, but I have also used a few free personal firewalls, one called SyGate and the other Tiny which I have found to be quite good.
You can download them from www.webattack.com
I'm sorry to be anal, but I had a few problems when trying to work out cryptic net commands when I first got started and they are as follows:Quote:
Originally posted by IchNiSan
been a while since I thought about this kind of issue,
but,
If someone knows your IP address, they could open a dos prompt and type
net use \\Insert.your.IPaddress.here\nameofshare
and have an open connection to your shares or printers(of course there might be a password/username they need to connect, but that is a different issue.)
All someone needs to connect to your shares is a dos prompt. Unless you are behind a firewall, or are running a firewall on your machine.
good luck,
ichnisan
1)nbtstat -A <ipaddress>
gives names of computer, current user, etc.
nbtstat -a <computername>
as above.
2)net view \\<ipaddress>
view available shares, if any.
3)net use z: \\<ipaddress>\x
this would map the remote share 'x' to local drive 'z'.
4)net use /delete z:
This would remove the connection to the remote share 'x' from your computer)
this is a brief overview of accessing shares through a dos terminal. There are other <quote>EASIER</quote> ways to access remote shares from windows, but mmmmmphh.
Interesting. Would you please state why you think ZoneAlarm is easy to bypass?Quote:
Originally posted by tiger team
Zonealarm is good but it easy to bypass it...
Ditto !
I'd also be interested to know how to bypass ZoneAlarm.
(other than an IRQ/MSN/AIM hack) If that's what you are referring to.
I'm not sure of the link but it comes from Negative's "Why your firewall sucks" although that's not just for ZA, but any firewall that trusts any web browser hitting port 80.
Like Vorlin stated any Personal Firewall will be vulnerable to applications ran from the inside on port 80...
e.g. if a malicious thing calls itself iexplorer...
but some firewalls like the newest sygate and ZA versions do a check on program integrity, when the prog changes those firewalls will show up a message so you are alerted and can take action.
There is another way to bypass ZA:
ZA will not filter incoming mail, so if a trojan in a mail could disable ZA (register hack) ZA will not monitor connections anymore and leave your box wide open to the net...
the very best thing i did is to setup another computer which will be your firewall a little tweaking is needed. this computer will act as a sub-server of the proxy server. acts like a net on anything. email on how it is done [email protected]
Zone Alarm doesn't filter email, but it does 'quarantine' attachments.
Isn't that what an Anti Virus is for ? To scan emails and attachments after they pass the firewall.
Excuse my thought process, but I seperate 'hacks/intrusions' from
'virus/worms'.
Consequently I run both firewall(s) and Anti Virus.
I'am using the same setup right now... like many others here.Quote:
Originally posted by protocool
the very best thing i did is to setup another computer which will be your firewall a little tweaking is needed. this computer will act as a sub-server of the proxy server. acts like a net on anything. email on how it is done [email protected]
I think it's a very good way to go, especially when you use a linux box to perform the firewall task
I think this is about how secure you want your system to be. The most secure solution is to run a seperate PC as a hardware firewall (which is what most commercial organisations do).
However, if you are running a software firewall (ZoneAlarm, Tiny, whatever), together with an up to date virus scanner, this is extremely difficult to breach, as long as it is used correctly i.e. don't open attachments (save them instead, and let your AV scanner evaluate them), don't use the preview pane in Outlook etc.
For example, it is almost impossible to hack IE, because something like ZoneAlarm will recognise the change.
And the second line of defence is your AV scanner (together with a routine scan for trojans), which should pick up any changes.
I have zonealarm, its pretty nice.
I dont think SyGate is a firewall though. I use it to link my two computers to share the same cable connection, with one being the server, ( its the one with the connectioin). I could be wrong though //shrug//
:firedevil:
What you mean is the Sygate Home Network, which is a software router to split an internet connection.
You can config this software to do a NAT for you, so the computers in your LAN are not visible from the internet side and I believe the packet also provides statefull packet inspection...
That's for Sygate Home Network
What I mean with *Sygate* is the Sygate personal Firewall which is free available from their website.
ok, that makes a bit more sense lol.
:shootem:
actualy, this works on the LAN atleast, all someone needs to do is to use IE to access all your shares. \\IP.Address.goes.here\ put that in your address box gives you an idiots view of all the shares and then you just navigate like its a local directory