[ale] Open Source Firewall for Windows 2000/XP?

[Byron A Jeff]

On Thu, Jun 03, 2004 at 10:51:49AM -0400, Jonathan Glass wrote:
> Please check my Tips-N-Tricks web site for information on Windows
> firewalls.
> 
> http://www.ibb.gatech.edu/~jglass/tips-n-tricks/windowsipsec/

Took a good look. Looks like an excellent starting place.

One thing though: the web page says that the W2K resource kit must be
purchased. However I found through this site:

http://www.petri.co.il/download_free_reskit_tools.htm

... that microsoft allows for a free download here:

http://www.microsoft.com/windows2000/techinfo/reskit/tools/existing/ipsecpol-o.asp

The download free reskit tools site has a lot of different stuff on it.

I'll check it out. Anything to provide a simple first line of defense against
attacking worms will be appreciated.

BAJ
> 
> Thanks!
> 
> Jonathan glass
> 
> On Thu, 2004-06-03 at 09:13, Byron A Jeff wrote:
> > Tap, Tap. Is this thing on?
> > 
> > The company Windows 2000 laptop got infected with Sasser yesterday. I only
> > use it for presenting PP slides, and often it isn't up long enough for
> > Windows update to load to reboot. I guess I'll have to have a policy where I
> > boot the machine specifically for the update.
> > 
> > So it got me to thinking about more proactive anti-infection measures of the
> > worm variety. I don't read E-mail or browse with the machine, so network worm
> > infection is the primary vehicle of infection. I don't offer any services,
> > so I really don't need any open ports. So a simple firewall that blocks
> > all incoming ports would thwart most damaging code.
> > 
> > On of my newer missions to look for Open Source alternatives to existing
> > Windows software. Software like OpenOffice.org, Mozilla/Firebird/Thunderbird,
> > Apache, Python, PHP, and the like can help ease the transistion/dependence on
> > Windows.
> > 
> > But one needs a personal firewall when plugging into unprotected networks. And
> > in keeping with the OS theme, it should be OS.
> > 
> > So any ideas? I saw a student project of a packet filtering firewall here:
> > 
> > http://www.codeproject.com/internet/smfirewall.asp
> > 
> > But I was wondering if anyone knew of something better.
> > 
> > BAJ
> > _______________________________________________
> > Ale mailing list
> > Ale at ale.org
> > http://www.ale.org/mailman/listinfo/ale
> -- 
> Jonathan Glass
> Systems Support Specialist II
> Institute for Bioengineering & Bioscience
> Georgia Institute of Technology
> Email: jonathan.glass at ibb.gatech.edu
> Office: 404-385-0127
> Fax: 404-894-2291
> 
> _______________________________________________
> Ale mailing list
> Ale at ale.org
> http://www.ale.org/mailman/listinfo/ale