Re: Hack / take down new WindowsXP beta server

From: Peter Meister (petermeiat_private)
Date: Sat Apr 14 2001 - 17:37:19 PDT

  • Next message: Curt Wilson: "Re: Ports vulnerability database"

    And the HAMMER IS DROPPED...Very good response, Enterprise Edition holds
    the ICSA Cache Firewall # 1 status as of today...And is being used by
    many large Fortune 100's as a frontline Enterprise Firewall...XP uses a
    slimmed but no less effective version of ISA for its Firewall....enabled
    at the NIC it can protect a home user or Corporate user connecting
    outside of corporate Infrastructure from most types of
    infiltration....Now if we go into the ISS module in ISA which focuses on
    IDS and all the plugins and corporate 3rd party vendors support behind
    it I would say ISA has quite a good chance at succeeding and competing
    heavily against the other Tier 1 Firewall in the Industry today...
    
    You should checkout http://www.isaserver.org and READ UP MY FRIED..
    
    Also... http://www.microsoft.com/isa/
    
    Don't pop off until you've done your Homework!!!
    
    -----Original Message-----
    From: Attonbitus Deus [mailto:Thorat_private]
    Sent: Saturday, April 14, 2001 12:13 PM
    To: VULN-DEVat_private
    Subject: Re: Hack / take down new WindowsXP beta server
    
    
    Oh PLEASE!
    
    You clearly have no knowledge of XP _or_ of ISA Server.  Why would you
    post
    something like this?
    XP has its own fw built in (and is actually pretty cool.).
    
    ISA Server is a MAJOR product!  You think putting it in front of 2 home
    computers is going to show its usefulness?? At $6000 a pop for the ent
    edition, I doubt Danny Diprod is going to rush out to Best Buy to
    purchase
    it to keep the neighborhood script kiddies from defacing his home web
    site.
    
    I know you people are just using this thread to bash MS, but you might
    want
    to at least educate yourselves on the products first, or you are the
    ones
    that end up looking foolish.
    
    ---------------------------------
    Attonbitus Deus
    Thorat_private
    
    
    
    ----- Original Message -----
    From: "Thomas Ryan" <Tom.Ryanat_private>
    To: <VULN-DEVat_private>
    Sent: Friday, April 13, 2001 11:36 AM
    Subject: Re: Hack / take down new WindowsXP beta server
    
    
    > They are Probably using ISA SERVER.
    > They Need to show it's usefulness before they can promote its sales.
    >
    > -----Original Message-----
    > From: Dave Woods [mailto:daveat_private]
    > Sent: Thursday, April 12, 2001 7:54 PM
    > To: VULN-DEVat_private
    > Subject: Re: Hack / take down new WindowsXP beta server
    >
    >
    > The average home user usually would have more open ports but there is
    some
    > sort of firewall software installed ("I've been checking out my
    Internet
    > Connection Firewall logs and am amazed at..."). Whether this is
    something
    > completely integrated with XP or third party is not specified.
    >
    > -----Original Message-----
    > From: VULN-DEV List [mailto:VULN-DEVat_private]On Behalf Of
    Aaron
    > Leith
    > Sent: April 12, 2001 12:10 PM
    > To: VULN-DEVat_private
    > Subject: Re: Hack / take down new WindowsXP beta server
    >
    >
    > its back up again
    > nmap syn port scan 1-1024 showed only the http port open
    > from my experiance the average home user would have more
    > than this open
    > the first time i went to it i used lynx and it requested a download of
    a
    > msdos program  <- wtf????? then tried to go there in netscape to get a
    > better idear of what it was trying to do,but it wasn't responding my
    guess
    > would be that the "msdos program" was cmd.exe prehaps someone got in
    with
    a
    > url exploit?
    



    This archive was generated by hypermail 2b30 : Sat Apr 14 2001 - 20:06:59 PDT