Securing a Server by firewall and File Sharing
From: Abhishek Srivastava (abhishek-srivastava_at_nospam.net)
Date: 03/23/04
- Next message: Carl Fenley: "Domain Name and SMTP - What's my Real Exposure?"
- Previous message: neo [mvp outlook]: "Re: 3 minute login delay on Domain"
- Next in thread: Kristofer Gafvert: "Re: Securing a Server by firewall and File Sharing"
- Reply: Kristofer Gafvert: "Re: Securing a Server by firewall and File Sharing"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 23 Mar 2004 12:59:54 +0530
Hello All,
Recently I attended a Technet seminar where a MS security expert asked
us to install a firewall software on our machines to prevent the
spreading of worms which exploit the RPC vulnerabilities. [We were also
given free CDs with eval copy of firewall software].
I remember that I had installed an already existing firewall on my
machine and realized that I can no longer connect to drives shared by
others and no one can connect to any directories shared by me. (by means
of windows file sharing)
This was contradictory because a security expert had recommended that we
use File shares (on machines running latest virus definitions) for
exchanging files rather than sending mail attachments.
This is a problem. I want to secure my machine and am ready to install
the firewall. However, I want to be able to share directories and be
able to access directories shared by others. [We have already idenified
machines as file servers and we make sure that all patches and virus
definitions are the latest on those machines. people have already been
recomended to use file shares rather than sending mail attachments. This
was done following the advice of the security expert].
I found out that file sharing is DCOM based and therefore cannot be used
accross firewalls.
Is there any software patch available which can make the filesharing of
windows to work on a well known port? so that I can install the firewall
and open only that specific port?
Will this defect in the file sharing mechanism be solved in any of the
upcoming version of windows? (namely the upcoming windows longhorn ?)
Thanks for your help.
regards,
Abhishek.
- Next message: Carl Fenley: "Domain Name and SMTP - What's my Real Exposure?"
- Previous message: neo [mvp outlook]: "Re: 3 minute login delay on Domain"
- Next in thread: Kristofer Gafvert: "Re: Securing a Server by firewall and File Sharing"
- Reply: Kristofer Gafvert: "Re: Securing a Server by firewall and File Sharing"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|