[ISN] Security UPDATE--A Long Way from Junk-Free Inboxes--May 26, 2004

From: InfoSec News (isn@private)
Date: Fri May 28 2004 - 05:46:37 PDT

  • Next message: InfoSec News: "On the Other hand: Re: [ISN] Auditors warn of foreign risks to weapons software"

    ====================
    
    ==== This Issue Sponsored By ====
    
    Exchange & Outlook Administrator
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BEf10AV
    
    Implementing Client Security on Windows 2000/XP
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BHGO0AX
    
    ====================
    
    1. In Focus: A Long Way from Junk-Free Inboxes
    
    2. Security News and Features
       - Recent Security Vulnerabilities
       - News: Yahoo Publishes IETF Draft for DomainKeys
       - News: 20 Tips on Securing Outlook in 20 Minutes
       - News: Microsoft Identity and Access Management Series
       - News: Shavlik Technologies Partners with NetIQ and ENDFORCE
    
    3. Security Toolkit
       - FAQ
       - Featured Thread
    
    4. New and Improved
       - Enterprise-Class Firewall for the Small Business
    
    ====================
    
    ==== Sponsor: Exchange & Outlook Administrator ====
    
       Try a Sample Issue of Exchange & Outlook Administrator!
       If you haven't seen Exchange & Outlook Administrator, you're
    missing out on key information that will go a long way towards
    preventing serious messaging problems and downtime. Request a sample
    issue today, and discover tools you won't find anywhere else to help
    you migrate, optimize, administer, and secure Exchange and Outlook.
    Order now!
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BEf10AV
    
    ====================
    
    ==== 1. In Focus: A Long Way from Junk-Free Inboxes ====
       by Mark Joseph Edwards, News Editor, mark at ntsecurity dot net
    
    In the March 3, 2004, edition of Security Update, I briefly explained
    three proposed technologies--Sender Policy Framework (SPF),
    DomainKeys, and Caller ID for E-Mail--that might help curb the amount
    of junk mail influx most of us receive each day. You can read the
    article at the following URL:
       http://www.winnetmag.com/article/articleid/41892/41892.html
    
    Recently Yahoo!, developer of the DomainKeys technology, submitted a
    draft to the Internet Engineering Task Force (IETF) that outlines the
    basics of the technology. As you'll learn when you read the draft,
    which is linked in the related news story, "Yahoo Publishes IETF Draft
    For DomainKeys," in this edition of the newsletter, Yahoo! still has
    plenty of work to do on DomainKeys.
    
    The developers of SPF technology have also submitted a draft proposal
    to the IETF (see the first URL below), and Microsoft has also
    submitted a draft proposal for Caller ID for E-Mail. You can learn
    more about SPF and Caller ID at the second, third, and fourth URLs
    below.
       http://spf.pobox.com/draft-mengwong-spf-01.txt
       http://spf.pobox.com/
       http://www.microsoft.com/mscorp/twc/privacy/spam_callerid.mspx
       http://www.ietf.org/internet-drafts/draft-atkinson-callerid-00.txt
    
    In essence, DomainKeys technology works by digitally signing email
    messages, then attempting to verify digital signatures by
    communicating with the domain that allegedly sent the email message.
    SPF and Caller ID try to verify the alleged sending domain of a given
    email message, but they don't use digital signatures. At the time of
    this writing, both SPF and Caller ID try to verify that the mail
    headers of a given message haven't been forged (as is the case with a
    lot of junk mail) by checking particular DNS records (specially
    formatted TXT records) against records written into mail headers.
    
    Although all three technologies provide reasonable ways to verify an
    email message's origin, they all contain problems that determined
    spammers could exploit. Thus none of the technologies is an end-all
    solution for junk mail. However, using all three technologies together
    might improve the ability to curb unwanted email.
    
    As was pointed out on the IETF Anti-Spam Research Group (ARGS) mailing
    list, even with all three of the proposed technologies in place,
    domain operators can further reduce junk mail by adding other
    technologies--such as those that ban senders, domains, and sets of IP
    addresses--commonly referred to as blacklisting. But even combining
    all these technologies won't completely eliminate junk mail.
       https://www1.ietf.org/mailman/listinfo/asrg
    
    So far, the only solutions I've seen that can eliminate nearly all
    unwanted email are the types that use some sort of challenge and
    response system. For example, some solutions require a sender to visit
    a Web page the first time he or she sends an email to a certain user.
    At the Web page, the sender might have to type in a keyword shown on
    the screen or perform some other type of response. Other solutions
    might use email to deliver and process the challenge and response.
    These solutions are minor inconveniences for most people, but they
    often present major problems for sightless individuals.
    
    Even though many thousands of networks and software vendors, including
    AOL, Earthlink, Google, Symantec, and Brightmail, have already
    integrated SPF and thousands of others are undoubtedly slated to begin
    using DomainKeys or Caller ID or both, many people will continue to
    receive more junk mail than they care to tolerate. And because even a
    combined set of the current and proposed solutions won't satisfy every
    network's needs, we'll likely see more solutions become available.
    
    Incidentally, Symantec recently purchased Brightmail for approximately
    $370 million. Brightmail provides solutions that guard against spam,
    spoofed email, viruses, and more. Given Brightmail's extensive client
    base of major corporations, including AT&T, Microsoft, Cisco Systems,
    Lucent Technologies, Motorola, and eBay, the deal will permit Symantec
    to provide an even more rounded solution for email processing. You can
    read about the acquisition at Brightmail's Web site.
       http://www.brightmail.com/pressreleases/051904_pr.html
    
    ====================
    
    ==== Sponsor: Implementing Client Security on Windows 2000/XP ====
    
       Learn the requirements for securing client computers in
    environments where Windows Server 2003, Windows 2000 and Windows NT
    4.0 servers are present. You will also learn how to implement best
    practices for clients in extreme high-security environments. The
    session will discuss the use of Group Policy and Administrative
    Templates to secure Windows 2000 and Windows XP installations and
    provide guidance on software restriction policies, anti-virus
    strategies, and distributed firewall technologies. This session also
    covers configuring Microsoft Office and Internet Explorer to help
    achieve a secure client environment. Register now!
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BHGO0AX
    
    ====================
    
    ==== 2. Security News and Features ====
    
    Recent Security Vulnerabilities
       If you subscribe to this newsletter, you also receive Security
    Alerts, which inform you about recently discovered security
    vulnerabilities. You can also find information about these discoveries
    at
       http://www.winnetmag.com/departments/departmentid/752/752.html
    
    News: Yahoo Publishes IETF Draft for DomainKeys
       Yahoo submitted a draft of its proposed junk mail solution,
    DomainKeys, to the Internet Engineering Task Force (IETF). The
    proposal outlines the concepts and some of the technical
    specifications that could be implemented on mail servers to help
    verify the identity of the actual domain used to send email messages.
    Yahoo anticipates that such identification will help pinpoint people
    who send unwanted or illegal email solicitations.
       http://www.winnetmag.com/article/articleid/42716/42716.html
    
    News: 20 Tips on Securing Outlook in 20 Minutes
       Windows & .NET Magazine author Paul Robichaux wrote a book, "Secure
    Messaging with Exchange Server 2003," which is published by Microsoft
    Press. An excerpt chapter from the book, "20 Tips on Securing Outlook
    in 20 Minutes," is now available online to help people secure their
    Outlook clients.
       http://www.winnetmag.com/article/articleid/42726/42726.html
    
    News: Microsoft Identity and Access Management Series
       Microsoft published a new article series, "Identity and Access
    Management," which helps explain how digital identity can be
    implemented and used to access network resources.
       http://www.winnetmag.com/article/articleid/42730/42730.html
    
    News: Shavlik Technologies Partners with NetIQ and ENDFORCE
       Shavlik Technologies announced it has entered into partnering
    agreements with NetIQ and ENDFORCE. The two companies will incorporate
    Shavlik's HFNetChkPRO patch-management software into their respective
    enterprise solutions.
       http://www.winnetmag.com/article/articleid/42725/42725.html
    
    ====================
    
    ==== Announcements ====
       (from Windows & .NET Magazine and its partners)
    
    Get 2 Sample Issues of Windows & .NET Magazine!
       Every issue of Windows & .NET Magazine includes intelligent,
    impartial, and independent coverage of security, Active Directory,
    Exchange, scripting, and much more. Our expert authors deliver how-to
    articles and product evaluations that will help you do your job
    better. Try two, no-risk sample issues today, and find out why 100,000
    IT professionals rely on Windows & .NET Magazine each month!
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BEuX0AP
    
    Get the Most Out of IIS 6.0 Performance and Tuning
       In this free Web seminar, you'll learn about the Internet
    Information Services (IIS) performance-tuning tools, including System
    Monitor, Application Center Test, and Log Manager. The Webcast will
    show how to use these tools to gather Web server baseline performance
    information, optimize performance and memory utilization, and test
    performance of applications running on the Web server with different
    caching and configuration settings. Register now!
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BIYv0AV
    
    Free White Paper
       Get a free white paper and learn how to eliminate the top 5 email
    security threats including spam and viruses.
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BIb50AZ
    
    ====================
    
    ==== Hot Release: Symantec ====
    
       Free White Paper: "Automated Patch Management with ON iPatch"
       Download this free technical white paper now, courtesy of Symantec
    and Windows & .NET Magazine's White Paper Central:
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BIb60Aa
    
    ====================
    
    ==== 4. Security Toolkit ====
    
    FAQ: What's the Account Lockout Status Tool?
       by John Savill, http://www.winnetmag.com/windowsnt20002003faq
    
    A. The Account Lockout Status tool (lockoutstatus.exe) displays
    lockout information for a specified user by querying every contactable
    domain controller (DC) in the user's domain. You can download the
    Account Lockout Status tool at
    http://www.microsoft.com/downloads/details.aspx?familyid=d1a5ed1d-cd55-4829-a189-99515b0e90f7&displaylang=en.
    To use the tool, you must be running Windows 2000 Service Pack 3 (SP3)
    or later. To install lockoutstatus.exe, perform the following steps:
    
       1. Download the Account Lockout Status tool, then execute the
    downloaded lockoutstatus.msi file.
       2. Click Next to start the installation wizard.
       3. Check "I accept the terms in the license agreement" and click
     Next.
       4. Click Install Now.
       5. After installation is complete, click Finish.
    
    By default, the tool is installed in the C:\program files\windows
    resource kits\tools folder. Double-click lockoutstatus.exe. From the
    tool's File menu, click Select Target and enter the user whose status
    you want to check. You'll see a window, like the one in the figure at
    Figure, which displays the user's lockout information.
    
    You can also check a user's lockout information at the command line.
    To do so, enter the follow command where the suffix after -u is the
    username.
    
       lockoutstatus -u:administrator@private
    
    Featured Thread: Blackberry Server behind ISA
       (Two messages in this thread)
       A reader writes that he needs to use BlackBerry devices from behind
    a Microsoft Internet Security and Acceleration (ISA) Server, but he's
    having some trouble defining rules for the ports. He needs to open TCP
    port 3101 for bidirectional traffic and wants to know how to do it
    properly. He created a packet filter with the following
    characteristics: IP Protocol: TCP, Direction: Outbound, Local port:
    Fixed Port, Local Port Number 3101, Remote Port: All Ports, Remote
    Ports: Subdued. However, that approach doesn't work, and he wants to
    know what he's doing wrong. Lend a hand or read the responses:
    http://www.winnetmag.com/forums/messageview.cfm?catid=42&threadid=119881
    
    ====================
    
    ==== Events Central ====
       (A complete Web and live events directory brought to you by Windows
    & .NET Magazine: http://www.winnetmag.com/events )
    
    New--From Chaos to Control: Using Service Management to Reclaim Your
    Life
       Take control of your workday! If you're supporting 24 x 7
    operations by working around the clock instead of 9 to 5, learn how
    you can benefit from a sound service-management strategy. In this free
    Web seminar, you'll learn practical steps for implementing service
    management for your key Windows systems and applications. Register
    now!
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BIV80AQ
    
    ====================
    
    ==== 5. New and Improved ====
       by Jason Bovberg, products@private
    
    Enterprise-Class Firewall for the Small Business
       Comodo Trustix announced that its new entry level for the Trustix
    Firewall is five users and more. Trustix Firewall gives small and
    midsized business the benefits of an enterprise-class
    firewall-management solution. You can install and set up the product
    in less than 25 minutes. Trustix Firewall's GUI makes the product
    easily configurable, saving you money on time, maintenance, and
    licensing costs. Trustix Firewall is part of a portfolio of
    business-infrastructure solutions, which include Trustix LAN Server
    for file sharing, Trustix Mail Server for communication, and Trustix
    Web Server for interaction with business partners and customers. Each
    product is ready to use out of the box and benefits from the
    platform-independent Xploy utility. Trustix Firewall costs $270. For
    more information about the product, contact Comodo Trustix on the Web.
       http://www.trustix.com
    
    Tell Us About a Hot Product and Get a T-Shirt!
       Have you used a product that changed your IT experience by saving
    you time or easing your daily burden? Tell us about the product, and
    we'll send you a Windows & .NET Magazine T-shirt if we write about the
    product in a future Windows & .NET Magazine What's Hot column. Send
    your product suggestions with information about how the product has
    helped you to whatshot@private
    
    ====================
    
    ==== Sponsored Links ====
    
    Argent
       Comparison Paper: The Argent Guardian Easily Beats Out MOM
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BDWV0Aq
    
    Microsoft(R) TechNet
       Microsoft(R) TechNet Webcasts: essential guidance, industry experts
       http://list.winnetmag.com/cgi-bin3/DM/y/ef5p0CJgSH0CBw0BG360Al
    
    ====================
    
    ==== Contact Us ====
    
    About the newsletter -- letters@private
    About technical questions -- http://www.winnetmag.com/forums
    About product news -- products@private
    About your subscription -- securityupdate@private
    About sponsoring Security UPDATE -- emedia_opps@private
    
    ====================
    
    ==== Contact Our Sponsors ====
    
    Hot Release Sponsor:
       Symantec -- http://www.symantec.com
    
    ====================
    
    This email newsletter is brought to you by Windows & .NET Magazine,
    the leading publication for IT professionals deploying Windows and
    related technologies. Subscribe today.
       http://www.winnetmag.com/sub.cfm?code=wswi201x1z
    
    You received this email message because you asked to receive
    additional information about products and services from the Windows &
    .NET Magazine Network. To unsubscribe, send an email message to
    mailto:Security-UPDATE_Unsub@private Thank you!
    
    View the Windows & .NET Magazine privacy policy at
    http://www.winnetmag.com/AboutUs/Index.cfm?action=privacy
    
    Windows & .NET Magazine, a division of Penton Media, Inc.
    221 East 29th Street, Loveland, CO 80538
    Attention: Customer Service Department
    
    Copyright 2004, Penton Media, Inc. All rights reserved.
    
    
    
    _________________________________________
    ISN mailing list
    Sponsored by: OSVDB.org
    



    This archive was generated by hypermail 2b30 : Fri May 28 2004 - 06:46:32 PDT