Author Topic: Problem?  (Read 8606 times)

0 Members and 1 Guest are viewing this topic.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re:Problem?
« Reply #15 on: December 04, 2003, 05:43:23 PM »
Setting up the Win XP Firewall

From the Control Panel
Click 'Network & Internet Connections',
Click 'Internet Properties',
You will see a list of connections you use to connect,
right click on the connection you want to protect,
from the dropdown menu click 'properties'
from the diolog box click 'advanced' button at the top menu, the next screen - check the box that
says 'enable firewall', then click the settings button at the bottom of that diolog box.
you guys can take it from there.
Ilya

Thanks, I have never 'notice' that button...
You earn your applaud for it...
But now guys, anyone has a suggestion for all those 'options' especially for ICMP (Internet Control Message Protocol)?  ;)
The best things in life are free.

Offline techie101returns

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1900
Re:Problem?
« Reply #16 on: December 04, 2003, 11:55:53 PM »
Technical,

The access to ICMP varies with each application.
I usually have some rules written limiting both TCP and ICMP connections for different applications.

The one I worry most about is IE (of course....whatelse is new)

Here are some suggested rules.  You can configure XP to some degree to meet them by limiting port access.

Block all addresses for TCP 445 remote, both directions
Block all addresses for TCP 135-139 local, both directions
Block all addresses for UDP 135-139 remote and local, both directions
Block all addresses for ICMP Type 10 outgoing only!
Allow all addresses for ICMP Type 11 both directions
Block all addresses for UDP 67 Remote and 68 Outgoing, both directions

You can allow IE to access TCP 80, 443, 20 and 21 remote as well as 1024-5000 local.

These rules will curtail "hackins" using IE.  However, you will notice that searches cannot be done directly from the address bar with XP with the ruleset.  I use other search engines from links so I would rather have the protection in place.  You can play with the ruleset I provided to see what you like and don't like.

These offer a modicum of protection for IE.

At your service,
techie
« Last Edit: December 04, 2003, 11:59:09 PM by techie101 »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67274
Re:Problem?
« Reply #17 on: December 05, 2003, 11:41:01 AM »
Thank you for your help... I earn my day  8)
I'll do some testings and see what happens. Very thanks again  ;)
The best things in life are free.