Flaw could unleash another Slammer

TalkBack 28 of 30:

Next »

« Previous

• Thread View
• Flat View

Protecting Windows Computers

A computer running Windows-- any version of Windows-- cannot be trusted. The resposible thing to do is put those machines behind a firewall, and use NAT for internet access.

Businesses-- this is not that difficult! But please do not make the mistake of relying on a firewall that runs on Windows. Use a standalone firewall, and only allow the ports and protocols that are necessary for business. It is unlikely that external access to ports 135, 137, 138, or 139 are needed (ingress or egress). Block 'em! If you don't, the chances are good you will become part of the problem. This applies to servers as well as workstations. A good firewall will allow you to tunnel specific ports (as needed) to your servers.

Home users-- you are particularly vulnerable, more so if you are on a high speed connection (DSL, cable modem, etc.). Get a "broadband router" from Netgear, SMC, or Linksys (there are many other vendors offering similar products). Do this even if you only have one computer!

A Windows machine with a raw IP address is like a kitten in a shark tank. Using NAT technology is perhaps the single best way to protect yourself. The best part is it's both cheap and simple!

Posted by: RestonTechAlec   Posted on: 12/10/03 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Reducing Server Total Cost of Ownership with VMware Virtualization Software VMware VMware virtualization enables customers to reduce their server TCO and ... Download Now