Security Basics mailing list archives

RE: [Re-post] Suggestions for basic software for security


From: "Richard H. Cotterell" <seec () mail retina ar>
Date: Mon, 30 Dec 2002 20:15:46 -0300



Ref: Di Fresco Marco <superdif () ciaoweb it>'s
     message dated 27 December 2002, 18:45 hours.

It isn't abundantly clear what you want to do.  You
say you're asking for "security software" for "port
scan, firewall, etc.".  You say you already have
ZoneAlarm and VirusScan.

Yes, I already have ZoneAlarm and VirusScan. I would like to know if
there is something else to try.

There are more, certainly, for you to try.

What isn't clear is what you're trying to do.  Are you
asking for offensive or defensive capabilities?

I am looking for defensive capabilities.

As you are feeling in an adventurous mood you can run NetPeeker.  It will 
cross-check if your firewall is letting through what is supposedly 
allowed AND only that.  It will tell you what IP address and service is 
passing through with a full log of the activity as it occurs.



For example, even on ME, you don't really *need* a
firewall...just turn off file sharing and any other
service that may be running that you don't need.  If
you do get interested in what the knee-biters are
trying to do, sure, install ZA again.

I have turned off all the services.

I think what you're missing here is the very basic
concepts of security.  For example, ME isn't going to
provide you much in the way of local security.
Upgrading to XP is better, but you still need to
understand the basic concepts of security.

In fact the (second, after defensive capabilities) purpose of my request
is to have some (basic) software to learn the concepts of security (at
least the basic ones).

You can also get MJK's ICMP Sniffer v1.2 and a good detailed paper on 
that subject from the Security Focus website.

Use your imagination and *Google* to find material that will give you 
information by subject that you are looking to learn from.

If you really do want software, check out FoundStone,
NTObjectives, SysInternals, and NTSecurity.nu.  Most
of the software at these sites will work on
XP...SysInternals has some ME software as well.

I will give a look. For WinME I am already thinking about upgrade to XP.



Di Fresco Marco







--
Richard H. Cotterell  <mailto:seec () mail retina ar>

All change is not growth, as all movement is not forward.
  -Ellen Glasgow, novelist (1874-1945)



Current thread: