Maximum Security FW Rules Win98SE

Discussion in 'other firewalls' started by DEAN, Jul 30, 2003.

Thread Status:
Not open for further replies.
  1. enigma

    enigma Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    53
    What a great discussion!!! I love it. Ive been looking for the free version of Tiny PF for awhile and all i could find was the 4.5 and 5.0 version. Could someone give me a link to the free version (2.15.A)? I even googled to find it and no luck.
    Would there be a problem running both TPF and NPF on Win. 98SE?
    Thanks.
     
  2. BlitzenZeus

    BlitzenZeus Security Expert

    Joined:
    Feb 11, 2002
    Posts:
    451
    Location:
    Oregon, USA
    Enigma, don't get the old tiny version, get Kerio 2.1.5, its the same program, only upgraded, and is more secure.

    There is always the arguement of running two firewalls on the same system, both would be complex, so I don't recommend it. Especially with those two since they are both rule based, and it would be a pain to configure both firewalls.

    Edit: I used to keep the installs of the older Tiny versions, but there was no reason to. Right now I could rename a program to something, and bypass the Tiny 2.x firewall completely. That is why you don't want to use it.
     
  3. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    Hi enigma

    Is there a particular reason you feel you need to run 2 software firewalls? While multiple software firewalls may run without issue on your system, it is generally not recommended.

    Regards,

    CrazyM
     
  4. enigma

    enigma Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    53
    Hay to BlitzenZeus and CrazyM,
    I thought being redundant with 2 firewalls might be a little more secure. However, after reading your questions to me it i think ill stick with just NPF :)
    After reading these 4 pages, where is Dean coming from? Im pretty new at puters (5yrs), but the more i read, the deeper it got. I even got my boots on after page 3 :D. Set him straight, if he will listen, and his problems will be solved. His system is all fouled up. Even i can see that!! Parinoid!!
    Thanks for making me think before jumping.
     
  5. root

    root Registered Member

    Joined:
    Feb 19, 2002
    Posts:
    1,723
    Location:
    Missouri, USA
    It's not a bad idea to have a backup scanner for your AV and maybe AT, but when it comes to firewalls, to work they need to be resident. Two programs resident at the same time trying to meter the traffic in the same general area is a sure bet to cause trouble.
    When it comes to firewalls, if you don't trust the one you have to do the job, then get one you can trust.

    I once felt the way you did, but I learned from others that had gone before me. Five years is a good start. Just remember to have fun. :)
     
  6. DEAN

    DEAN Guest

    Hi guys, ya I know it sounds like my system is screwed up, but it aint, honest. Anybody who wants to remove rnanp.dll and ensure their is no remote access can merge this reg file to remove the warning on win98 startup.

    REGEDIT4

    ;removes remote access pointer
    [HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\NetworkProvider]
    ;"ProviderPath"="C:\\WIN98\\SYSTEM\\RNANP.DLL"
    "ProviderPath"=""

    I just saw a review of XP that sells it and one knowledable guy said ms finally did it, they came out with a BO operating system!!!

    Why do they do this? I dont know it must be the power base and control freak attitude you find in many women type deal.
    I am now testing my ISP Gorns to watch what they do as I increase the security level!!!
    Will keep you up to date.
     
  7. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Tell me DEAN, what's a BO operating system?
    And a woman type deal? and control freak attitude you find in many women type deal?
    Thanks in advance for the enlightment so i can follow your explications better again.
     
  8. MickeyTheMan

    MickeyTheMan Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    1,017
    Seems to me you should complete your search for information, and once you have gained sufficient knowledge, then you could start making making valid comments about firewalls.
    As it stands, you are loosing any kind of credibility as it is obvious you simply don't know what you are talking about !
     
  9. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    [move]WELL SAID!!!!!!!!!!!!![/move]
     
  10. enigma

    enigma Registered Member

    Joined:
    Jun 18, 2003
    Posts:
    53
    Hay everyone,
    I think this person (DEAN) is just jerking your chain! He/she may be just smart enough about puters to do it!!!! I mean, just read the 4 pages of posts. I mean _really_read them!!
     
  11. Phant0m

    Phant0m Registered Member

    Joined:
    Jun 7, 2003
    Posts:
    3,726
    Location:
    Canada
    LOLOLOLOLOLOL!
     
  12. DEAN

    DEAN Guest

    OKAY GUYS HOW ABOUT Some investigations by you too.

    check out this doc:

    http://www.vixa.com/womenit/security.html

    http://www.cryptonym.com/hottopics/msft-nsa/ReplaceNsaKey.zip

    Has Microsoft Betrayed the Trust of Millions of Window Users?
    Read about the questions around the world!
    by The Guide http://raj.guide2servers.com/tcpip/columns/_nsakey/index.html


    Microsoft Windows have consistently proven to be the weakest of all the known
    operating systems. This can be inferred by the large numbers (too numerous to list)
    of viruses and Trojans which have been released over last 2 years e.g. Back Orifice,
    Melissa, NetBus to name a few. Experts believe that there are two basic problems which
    results in Windows being such an insecure operating system--one it is based on
    technologies which are inherently weak, two being a closed platform it does not have
    the benefit of being reviewed by peers; an enormous benefit an open source operating
    systems enjoy.

    In additions to Windows inherent weaknesses, in last few months certain facts
    have been uncovered by independent security experts which suggest that Microsoft may
    have deliberately designed windows with a software key which give National Security
    Agency (NSA, US government spy agency) eased access to every copy of windows
    installed anywhere, using holes in existing networking software. This makes for a
    possibility of a major security compromise and giving access to US government
    (and others) any information stored on a Windows based computer system. It can
    also allow an open back door to install new or altered software, because of the
    compromise of Microsoft's Authenticode technology which depends upon the same software.

    Please note: The NSAkey episode is only one of the reasons, why Wondows cannot
    be relied on for mission critical applications. Security in Windows 95/98 is
    non-existent, and that in Windows NT is better, but still not mission-critical.
    See the following URLs for more information on Windows NT security. See:

    http://www.ntbugtraq.com
    http://www.tbtf.com/resource/ms-sec-exploits.html
    http://www.ntsecurity.net/security/passworddll.htm

    The discovery of a backdoor key to Windows may be one of the most "devastating news"
    for a millions of Windows users. It is for the first time in the history of computer
    security that such a gigantic breach of trust has transpired.

    While on the surface this issue was made to appear as an uproar that cannot be
    verified really, but there is much too much of information which has been uncovered
    to raise serious doubts about the security of any Windows based computer system
    - Windows95, Windows98, Windows2000 or WindowsNT.

    While the Microsoft developers did not deny the presence of the "_NSAKEY" they
    also did not also explain satisfactorily the purpose and anonymity of the key.
    They denied that it belongs to the NSA, but gave excuses for the presence of this
    fail over key that are difficult to believe.

    Microsoft's explanation for this other key is that he other key was a backup
    key meant for authentication of encrypted components in the event of failure
    of the first key. (This much is quite true.) Culp from Microsoft claims that
    "_NSAKEY" was colloquially used and is not shared with any outside party
    including the NSA. What he failed to explain is that this additional fail
    over key can be used or even replaced with another key, without any security
    notifications on the system of compromise. Once used or replaced,
    the entire hierarchy falls like a tower of blocks. ActiveX may be
    actually signed by someone other than the one claimed. Java applets,
    similarly. System libraries, Sessions with otherwise secure Internet servers,
    Virtual Private Networking - just about anything that has to do with security,
    that is varified through the CryptoAPI can no longer be trusted.


    I started this topic so everyone can know how to get rid of their computer
    problems they get when they go on the NET!!! such as having FW rules put in your
    FW, and modem settings installed as I have had. I am not an expert, but I do not have
    any more crash winnuke etc. problems, all Gone.

    PS: I also suggest you change the default port number for Proximitron (6666) as
    I think IE was being used as an oriface proxy. And make sure IE is not set to
    use that port unless you have too.

    MY COMPUTER HAS NO PROBLEM NOW WHILE ON THE NET!!! HOW ABOUT YOU!!!

    OH YA, forgot to tell you that I have a full backup of 98SE on F: drive the I
    reinstall after Ive been on the NET!!!

    OH YA, RNANP.DLL must be removed from DOS!


    A Simple Backup Program in WINDOWS:

    Deltree /Y f:\SYSBAK\7200CEL\*.*
    md f:\SYSBAK\7200CEL
    xcopy32 C:\*.* F:\SYSBAK\7200CEL /e /f /h /r /c
     
  13. Dan Perez

    Dan Perez Retired Moderator

    Joined:
    May 18, 2003
    Posts:
    1,495
    Location:
    Sunny San Diego
    Dean,

    I can probably find you links on the net that show that the moon is made from cheese or the Earth is flat; these are hardly sufficient proof that these are the case!

    Many of the people responding in the thread and trying to help you have many years of experience in supporting computers, supporting hundreds or thousands of systems and being paid very well for it, and *all* of them are wrong and only *you* are right?!

    The points you made in the previous post show nothing new. No one is claiming that an MS OS is by any means highly secure by default. The point is that it is not nearly as bad as you have been making it out to be, suspecting each critical system dll as being the personification of Evil come on Earth to destroy us all.

    Personally, I feel this thread has long ago departed from any usefulness whatsoever since you seem absolutely unwilling to credit anyone with any knowledge of what they speak and insist holding on to your cherished prejudices.

    I ask that you seriously reread the thread and try to read the posts of others in a fresh light.
     
  14. DolfTraanberg

    DolfTraanberg Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    676
    Location:
    Amsterdam
    I can't get rid off the idea DEAN is just a psychological discussion program. :D
    Dolf
     
  15. Bdiamond

    Bdiamond Registered Member

    Joined:
    Apr 26, 2002
    Posts:
    74
    Location:
    N Carolina, USA
    Dan,

    A really thoughtful and elegant response.
    Thanks,

    Bdiamond
     
  16. CrazyM

    CrazyM Firewall Expert

    Joined:
    Feb 9, 2002
    Posts:
    2,428
    Location:
    BC, Canada
    I agree and for now the thread will be locked.

    Dean,
    If you have any concerns with this, you can contact me via the email in my profile.

    Regards,

    CrazyM
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.