Wilders Security Forums  

Go Back   Wilders Security Forums > Security Products > other firewalls
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old January 4th, 2007, 09:08 PM
Derek Derek is offline
Infrequent Poster
 
Join Date: Oct 2003
Posts: 12
Default Kerio 2.1.5 (Derek)

Hi. I seem to have lost my way to the Kerio 2.1.5 forum (or maybe it's been disbanded) so I hope this is the right place. I'm still on W98SE btw.

Quite often when I try downloading I get a TCP (In) alert for Internet Explorer. This is usually from the associated website and can indicate various ports. I've even had it happen on MS downloads. If I find it essential to permit this I do so....

What I am wondering is if it would be unwise to allow this as a permanent global rule for IE or would it open the door to attackers generally?

Sorry if this is in the wrong forum. If so please give me a link to the correct place.
  #2  
Old January 4th, 2007, 09:27 PM
Alphalutra1's Avatar
Alphalutra1 Alphalutra1 is offline
Very Frequent Poster
 
Join Date: Dec 2005
Location: 127.0.0.0/255.0.0.0
Posts: 1,160
Default Re: Kerio 2.1.5 (Derek)

Here is the kerio 2.1.5 forum. As to incoming connections from internet explorer, I definately don't believe that is necessary (that is if it is a TCP with a SYN flag).

Cheers,

Alphalutra1
__________________
Proud user of Gentoo, OpenBSD, dwm, (n)vi, heirloom-mailx, and pf
  #3  
Old January 4th, 2007, 09:38 PM
Derek Derek is offline
Infrequent Poster
 
Join Date: Oct 2003
Posts: 12
Default Re: Kerio 2.1.5 (Derek)

Thanks for input. I've just realised that this is the same place as I posted once before about KPF215 and I got a very informed response so (as your link seems to be to be away from Wilders) I'll leave it just on here for a while.

One thing I forgot to mention. I can browse the forum as much as I like and never see this alert. It seems to only happen on 'downloads'. With or without this rule invoked I seem to get through Shields Up with flying colors.
  #4  
Old January 4th, 2007, 09:39 PM
Derek Derek is offline
Infrequent Poster
 
Join Date: Oct 2003
Posts: 12
Default Re: Kerio 2.1.5 (Derek)

Ooops. I meant browse the "internet" (not the forum).
  #5  
Old January 4th, 2007, 10:50 PM
noway noway is offline
Frequent Poster
 
Join Date: Apr 2005
Posts: 345
Default Re: Kerio 2.1.5 (Derek)

Maybe you need to switch to passive FTP in browser options. (Tools-Internet Options-Advanced-Browsing-"Use Passive FTP")
  #6  
Old January 5th, 2007, 03:27 AM
BlitzenZeus's Avatar
BlitzenZeus BlitzenZeus is offline
Security Expert
 
Join Date: Feb 2002
Location: Oregon, USA
Posts: 451
Default Re: Kerio 2.1.5 (Derek)

It could be non-passive ftp which is easily fixed in the advanced options of the browser, however if it continues to happen please provide a few logs, or at least what the port/protocol was in the prompts.

I will still answer basic questions about the firewall, however I don't go in depth with peoples configurations anymore.
__________________
Yesterday we obeyed kings, and bent our necks before emperors. But today we kneel only to the truth. -Kahlil Gibran
  #7  
Old January 5th, 2007, 05:42 PM
Derek Derek is offline
Infrequent Poster
 
Join Date: Oct 2003
Posts: 12
Default Re: Kerio 2.1.5 (Derek)

I've set IE to Passive FTP and will see if this gets around the problem. It is only certain downloading tht seems to cause these alerts but if it should happen again now I'll pop back with all the details, as requested.

Thanks a lot everyone, you've been a great help.
 

Wilders Security Forums > Security Products > other firewalls « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 12:29 PM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums