Re: Firewalls

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance



On Nov 7, 1:22 pm, "db" <database...@xxxxxxxxxxx> wrote:
these ports can be viewed as holes or windows
of your system.

a firewall will keep many ports or windows
closed that would otherwise be used by malware
to open.

Thanks for your reply, db. I already understand, in a conceptual way,
what ports are and what a firewall does. From all the "general advice"
that I'm getting, though still appreciated, it seems that I am
struggling to make my question clear.

My question, as I have tried to explain, is about HOW malware can take
advantage of open ports. For this to be possible, there must be some
software on my PC that accepts and actions requests sent over the
Internet. Now, this may be some piece of software that I've
deliberately set up to run to perform some task, or it may be an
unintended vulnerability (essentially a bug). However, as I now
understand it, there is no inbuilt component of Windows that, by
default (i.e. without any action in my part), *intentionally* allows a
remote agent to perform any action on my PC over the Internet. If that
is wrong then please correct me.
.



Relevant Pages

  • Re: DCOM 10009 errors on SBS2008 with NAS
    ... make a specific GP rule that allows the ports to that NAS unit. ... The DCOM event id 10009 will occur when a client workstation has a miss-configured firewall or other issues affecting its network communications within the domain, for example if the workstation is not managed by an SBS GPO. ... Depending on your firewall solution this might be implemented or might require opening several ports. ... If the workstation is on a different subnet than the SBS server and it is running Windows XP SP2 or higher, the firewall exceptions provided by the SBS group policies will not properly allow the required connectivity. ...
    (microsoft.public.windows.server.sbs)
  • Re: New/old Trojan?
    ... > looking on google ... anything on Windows systems, ... Sounds like this malware may have rootkit-like ... ports can be useless. ...
    (Incidents)
  • Re: Security? What security?
    ... >> of that i get come through Internet Explorer, a Windows Browser if I'm not ... the rest of the time i use Netscape. ... assertion that these malware really did enter through IE. ... >You have no reputable firewall. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: XP SP2 and ports required to view a remote event log
    ... So for Windows XP SP2 with an enabled firewall, to handle this, ... Group Policy Settings Reference for Windows XP Professional Service Pack 2 ... Windows Firewall: Allow remote administration exception ... TCP ports 135 and 445. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: [fw-wiz] how prevelant
    ... over the same few ports), and the tendency of script kiddies to run ... Windows attack tools, I tend to suggest that if you open your firewall up ... > it amazing they were passing domain information across the internet. ...
    (Firewall-Wizards)