Windows Vista Forums
Vista Forums Home Join Vista Forums Windows 7 Forum Vista Tutorials Tags
Welcome to Windows Vista Forums. Our forum is dedicated to helping you find solutions with any problems, errors or issues you are experiencing with Windows Vista. The Vista forum also covers news and updates and has an extensive Windows Vista tutorial section that covers a wide range of tips and tricks.

Go Back   Vista Forums > Vista Newsgroups > Vista General

Vista - On security, in a nutshell..

Reply
 
Old 07-06-2009   #1 (permalink)
par7133


 
 

On security, in a nutshell..

Here to recap about security (what I can’t do is to realize that you
need it).
Anyway, I recommend you to check your security measures one more time.

1. Run an hardware firewall, this is the best thing you can do.
If you want a brand name, [Netgear: http://www.netgear.com].

Do you own a HDSPA or 3G modem and you feel the waves you
are subject to are enough to think to a wireless router?

You do well! I thought something like that:
[image:http://blog.daniele.bonini.name/public/2009/07/
img-607823b.jpg]

but it still doesn’t exist on the market.. so try to talk about
it.

2. Run Windows Firewall and mainly if you have a HDSPA or 3G
connection.
Not so powerful but it defends you from port scans and ddos
attacks.

3. Run a serious software firewall, [Outpost Firewall:http://
www.agnitum.com] seems alike.
Configures as better as possible the Application Rules for all
your web
applications giving attention to “window control”, “critical
objects”
and “key logging” as other too. Under Firewall, Network rules,
ICMP,
uncheck “echo request”. Under Attack Detection uncheck “Block
intruder IP for”, if the intruder impersonificates your dns server
is
inconvenient to block it; than Customize, Attacks, select all.

4. Run every web application by a downgraded user. This means to
create
a web user with very few authorizations to run your web
applications
only. Doing so you forbid attackers to enter by Opera, IE, Firefox
bugs
with your live and, probably, administrators credentials.

In Windows XP launch apps by holding SHIFT, right click on the
app,
“Run as..”

In Vista download [ShellRunAS: http://technet.microsoft.com/en-us/s...cc300361.aspx].
Ones installed, right click on the app
“Run as different user..”

5. Rename Guest user, and deactivate it, and rename Administrator.
Download [renuser:http://windowsitpro.com/article/articleid/15086/
how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.

6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
laugh..

7. Check out your browser settings. I suggest you [Opera:http://
www.opera.com], as code and plugins
are locked.

8. Download and buy, there is no easy escape, [Fortres 101:http://
www.fortresgrand.com/products/f101/f101.htm]. This software will
definitively lock down the web user created above and all the non
administrator users present in your system.

9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
index.html] appropriately to limit connections (and
map ports).

10 Eventually [change dns settings:http://www.dnsserverlist.org/].
Most of the attacks you receive
are through your dns servers ip impersonifications, indeed don’t
exclude
any morbose friendship alive within your dns servers network.
Eventually
opt for a [script periodically changing your dns settings:http://
tr.im/qV59].

My System SpecsSystem Spec
Old 07-06-2009   #2 (permalink)
par7133


 
 

Re: On security, in a nutshell..


http://blog.daniele.bonini.name/?p=1889


On Jul 6, 12:48*pm, par7133 <par7...@xxxxxx> wrote:
Quote:

> Here to recap about security (what I can’t do is to realize that you
> need it).
> Anyway, I recommend you to check your security measures one more time.
>
> 1. Run an hardware firewall, this is the best thing you can do.
> * * If you want a brand name, [Netgear:http://www.netgear.com].
>
> * * Do you own a HDSPA or 3G modem and you feel the waves you
> * * are subject to are enough to think to a wireless router?
>
> * * You do well! I thought something like that:
> * * [image:http://blog.daniele.bonini.name/publ...-607823b..jpg]
>
> * * but it still doesn’t exist on the market.. so try to talk aboutit.
>
> 2. Run Windows Firewall and mainly if you have a HDSPA or 3G connection.
> * * Not so powerful but it defends you from port scans and ddos attacks.
>
> 3. Run a serious software firewall, [Outpost Firewall:http://www.agnitum.com]
> seems alike. Configures as better as possible the Application Rules for all
> your web applications giving attention to “window control”, “critical objects”
> * * and “key logging” as other too. Under Firewall, Network rules, ICMP,
> * * uncheck “echo request”. Under Attack Detection uncheck “Block
> * * intruder IP for”, if the intruder impersonificates your dns server is
> * * inconvenient to block it; than Customize, Attacks, select all.
>
> 4. Run every web application by a downgraded user. This means to
> create a web user with very few authorizations to run your web
> applications only. Doing so you forbid attackers to enter by Opera, IE, Firefox
> bugs with your live and, probably, administrators credentials.
>
> * * In Windows XP launch apps by holding SHIFT, right click on the
> app, “Run as..”
>
> * * In Vista download [ShellRunAS:http://technet.microsoft.com/en-us/s...cc300361.aspx]. Ones installed, right click on the app “Runas different user..”
>
> 5. Rename Guest user, and deactivate it, and rename Administrator.
> * * Download [renuser:http://windowsitpro.com/article/articleid/15086/
> how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
> 6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you laugh..
>
> 7. Check out your browser settings. I suggest you [Opera:http://www.opera..com], as *code and plugins are locked.
>
> 8. Download and buy, there is no easy escape, [Fortres 101:http://www.fortresgrand.com/products/f101/f101.htm]. This software will
> * * definitively lock down the web user created above and all the non
> * * administrator users present in your system.
>
> 9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/index.html]
> appropriately to limit connections (and map ports).
>
> 10 Eventually [change dns settings:http://www.dnsserverlist.org/].
> Most of the attacks you receive
> * * are through your dns servers ip impersonifications, indeed don’t exclude
> * * any morbose friendship alive within your dns servers network. Eventually
> * * opt for a [script periodically changing your dns settings:http://tr.im/qV59].
My System SpecsSystem Spec
Old 07-06-2009   #3 (permalink)
Jim


 
 

Re: On security, in a nutshell..




Lot cheaper with free programs .


On Mon, 6 Jul 2009 04:48:31 -0700 (PDT), par7133
<par7133@xxxxxx> wrote:
Quote:

>Here to recap about security (what I can’t do is to realize that you
>need it).
>Anyway, I recommend you to check your security measures one more time.
>
>1. Run an hardware firewall, this is the best thing you can do.
> If you want a brand name, [Netgear: http://www.netgear.com].
>
> Do you own a HDSPA or 3G modem and you feel the waves you
> are subject to are enough to think to a wireless router?
>
> You do well! I thought something like that:
> [image:http://blog.daniele.bonini.name/public/2009/07/
>img-607823b.jpg]
>
> but it still doesn’t exist on the market.. so try to talk about
>it.
>
>2. Run Windows Firewall and mainly if you have a HDSPA or 3G
>connection.
> Not so powerful but it defends you from port scans and ddos
>attacks.
>
>3. Run a serious software firewall, [Outpost Firewall:http://
>www.agnitum.com] seems alike.
> Configures as better as possible the Application Rules for all
>your web
> applications giving attention to “window control”, “critical
>objects”
> and “key logging” as other too. Under Firewall, Network rules,
>ICMP,
> uncheck “echo request”. Under Attack Detection uncheck “Block
> intruder IP for”, if the intruder impersonificates your dns server
>is
> inconvenient to block it; than Customize, Attacks, select all.
>
>4. Run every web application by a downgraded user. This means to
>create
> a web user with very few authorizations to run your web
>applications
> only. Doing so you forbid attackers to enter by Opera, IE, Firefox
>bugs
> with your live and, probably, administrators credentials.
>
> In Windows XP launch apps by holding SHIFT, right click on the
>app,
> “Run as..”
>
> In Vista download [ShellRunAS: http://technet.microsoft.com/en-us/s...cc300361.aspx].
>Ones installed, right click on the app
> “Run as different user..”
>
>5. Rename Guest user, and deactivate it, and rename Administrator.
> Download [renuser:http://windowsitpro.com/article/articleid/15086/
>how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
>6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
>laugh..
>
>7. Check out your browser settings. I suggest you [Opera:http://
>www.opera.com], as code and plugins
> are locked.
>
>8. Download and buy, there is no easy escape, [Fortres 101:http://
>www.fortresgrand.com/products/f101/f101.htm]. This software will
> definitively lock down the web user created above and all the non
> administrator users present in your system.
>
>9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
>index.html] appropriately to limit connections (and
> map ports).
>
>10 Eventually [change dns settings:http://www.dnsserverlist.org/].
>Most of the attacks you receive
> are through your dns servers ip impersonifications, indeed don’t
>exclude
> any morbose friendship alive within your dns servers network.
>Eventually
> opt for a [script periodically changing your dns settings:http://
>tr.im/qV59].
My System SpecsSystem Spec
Old 07-06-2009   #4 (permalink)
ray


 
 

Re: On security, in a nutshell..

On Mon, 06 Jul 2009 04:48:31 -0700, par7133 wrote:
Quote:

> Here to recap about security (what I can’t do is to realize that you
> need it).
> Anyway, I recommend you to check your security measures one more time.
>
> 1. Run an hardware firewall, this is the best thing you can do.
> If you want a brand name, [Netgear: http://www.netgear.com].
>
> Do you own a HDSPA or 3G modem and you feel the waves you are
> subject to are enough to think to a wireless router?
>
> You do well! I thought something like that:
> [image:http://blog.daniele.bonini.name/public/2009/07/
> img-607823b.jpg]
>
> but it still doesn’t exist on the market.. so try to talk about
> it.
>
> 2. Run Windows Firewall and mainly if you have a HDSPA or 3G connection.
> Not so powerful but it defends you from port scans and ddos
> attacks.
>
> 3. Run a serious software firewall, [Outpost Firewall:http://
> www.agnitum.com] seems alike.
> Configures as better as possible the Application Rules for all
> your web
> applications giving attention to “window control”, “critical
> objects”
> and “key logging” as other too. Under Firewall, Network rules,
> ICMP,
> uncheck “echo request”. Under Attack Detection uncheck “Block
> intruder IP for”, if the intruder impersonificates your dns server
> is
> inconvenient to block it; than Customize, Attacks, select all.
>
> 4. Run every web application by a downgraded user. This means to create
> a web user with very few authorizations to run your web
> applications
> only. Doing so you forbid attackers to enter by Opera, IE, Firefox
> bugs
> with your live and, probably, administrators credentials.
>
> In Windows XP launch apps by holding SHIFT, right click on the
> app,
> “Run as..”
>
> In Vista download [ShellRunAS:
> http://technet.microsoft.com/en-us/s...cc300361.aspx].
> Ones installed, right click on the app
> “Run as different user..”
>
> 5. Rename Guest user, and deactivate it, and rename Administrator.
> Download [renuser:http://windowsitpro.com/article/articleid/15086/
> how-can-i-rename-a-user-from-the-command-prompt.html] if you need it.
>
> 6. Check out the the [NSA recommendations:http://g0.fi/iaV], and you
> laugh..
>
> 7. Check out your browser settings. I suggest you [Opera:http://
> www.opera.com], as code and plugins
> are locked.
>
> 8. Download and buy, there is no easy escape, [Fortres 101:http://
> www.fortresgrand.com/products/f101/f101.htm]. This software will
> definitively lock down the web user created above and all the non
> administrator users present in your system.
>
> 9. Configure cache and [proxy:http://www.youngzsoft.net/ccproxy/
> index.html] appropriately to limit connections (and
> map ports).
>
> 10 Eventually [change dns settings:http://www.dnsserverlist.org/]. Most
> of the attacks you receive
> are through your dns servers ip impersonifications, indeed don’t
> exclude
> any morbose friendship alive within your dns servers network.
> Eventually
> opt for a [script periodically changing your dns settings:http://
> tr.im/qV59].
Or simply install and run Linux and don't worry about it.
My System SpecsSystem Spec
Reply

Thread Tools


Similar Threads
Thread Forum
The Microsoft Security Response Centre - new Security Advisory released. System Security
Security discussion regarding hubs, firewalls, anti-virus and Vista Security System Security
SP1 Update in a nutshell (sort of) Vista General
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses Vista News
Security Matters — Microsoft 2006 Security Summits Provide Security Training for Detroit Businesses Vista News


Vista Forums is an independent web site and has not been authorized,
sponsored, or otherwise approved by Microsoft Corporation.
"Windows Vista", the Start Orb, and related materials are trademarks of Microsoft Corp.
© Designer Media Ltd

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46