Re: CRIME A couple questions...

From: Crispin Cowan (crispin@private)
Date: Wed Nov 13 2002 - 13:34:03 PST

  • Next message: Brent Tucker: "RE: CRIME A couple questions..."

    That is indeed a Windows (mis)feature, and it is a growing alternate 
    channel for spam. You do indeed block it with a firewall. See this 
    thread on Firewall Wizards for details 
    http://lists.insecure.org/firewall-wizards/2002/Oct/0315.html
    
    Crispin
    
    Todd Ellner wrote:
    
    > A couple things have shown up at work that someone on this list (or a 
    > whole bunch of someones) are probably experts on. Any advice you could 
    > give would be really appreciated.
    >  
    > 1) A couple of the Windows machines have been getting annoying popup 
    > spams. As near as we can tell it's not a Trojan program installed on 
    > the boxes. Not a mail message. Not an Instant Messenger thing. Not a 
    > web browser. Looks more like a regular dialog box. The Microsoft 
    > knowledge base was kind of cryptic.
    >  
    > Has anyone else experienced a rash of these?
    >  
    > 2) The first real version of the company's product has to be a little 
    > more flexible in terms of "classes of things the administrator can 
    > allow users to do". Are there some good books or net resources on 
    > formally defining security policies?
    >  
    > 3) Checkpoint? SonicWall? Something else that provides good value for 
    > the money for a small enterprise? Or should I just fall back on Old 
    > Reliable ("Building Internet Firewalls 2nd Edition")?
    >  
    > Todd
    >
    >
    >
    
    -- 
    Crispin Cowan, Ph.D.
    Chief Scientist, WireX                      http://wirex.com/~crispin/
    Security Hardened Linux Distribution:       http://immunix.org
    Available for purchase: http://wirex.com/Products/Immunix/purchase.html
    			    Just say ".Nyet"
    
    
    
    



    This archive was generated by hypermail 2b30 : Wed Nov 13 2002 - 14:08:12 PST