Oh PLEASE! You clearly have no knowledge of XP _or_ of ISA Server. Why would you post something like this? XP has its own fw built in (and is actually pretty cool.). ISA Server is a MAJOR product! You think putting it in front of 2 home computers is going to show its usefulness?? At $6000 a pop for the ent edition, I doubt Danny Diprod is going to rush out to Best Buy to purchase it to keep the neighborhood script kiddies from defacing his home web site. I know you people are just using this thread to bash MS, but you might want to at least educate yourselves on the products first, or you are the ones that end up looking foolish. --------------------------------- Attonbitus Deus Thorat_private ----- Original Message ----- From: "Thomas Ryan" <Tom.Ryanat_private> To: <VULN-DEVat_private> Sent: Friday, April 13, 2001 11:36 AM Subject: Re: Hack / take down new WindowsXP beta server > They are Probably using ISA SERVER. > They Need to show it's usefulness before they can promote its sales. > > -----Original Message----- > From: Dave Woods [mailto:daveat_private] > Sent: Thursday, April 12, 2001 7:54 PM > To: VULN-DEVat_private > Subject: Re: Hack / take down new WindowsXP beta server > > > The average home user usually would have more open ports but there is some > sort of firewall software installed ("I've been checking out my Internet > Connection Firewall logs and am amazed at..."). Whether this is something > completely integrated with XP or third party is not specified. > > -----Original Message----- > From: VULN-DEV List [mailto:VULN-DEVat_private]On Behalf Of Aaron > Leith > Sent: April 12, 2001 12:10 PM > To: VULN-DEVat_private > Subject: Re: Hack / take down new WindowsXP beta server > > > its back up again > nmap syn port scan 1-1024 showed only the http port open > from my experiance the average home user would have more > than this open > the first time i went to it i used lynx and it requested a download of a > msdos program <- wtf????? then tried to go there in netscape to get a > better idear of what it was trying to do,but it wasn't responding my guess > would be that the "msdos program" was cmd.exe prehaps someone got in with a > url exploit?
This archive was generated by hypermail 2b30 : Sat Apr 14 2001 - 18:33:25 PDT