Re: firewall on windows server 2003

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Andy Fish (ajfish_at_blueyonder.co.uk)
Date: 07/29/04 

Date: Thu, 29 Jul 2004 13:42:21 +0100

"Phillip Windell" <@.> wrote in message
news:e8CrGYKdEHA.3528@TK2MSFTNGP12.phx.gbl...
> "Andy Fish" <ajfish@blueyonder.co.uk> wrote in message
> news:c925c3dc.0407272242.73a2b676@posting.google.com...
> > Just as a follow-up, I found there is a thing called "local security
> > policy" which was configured by the hosting company.
> >
> > As far as I can tell, this is built into windows 2003 and is another
> > packet filtering firewall completely independent of ICF
>
> No it isn't a firewall,...not even close.
>

could you elaborate on this comment please?

obviously I understand that it is not a hardware firewall, but no software
firewall could ever make this claim.

are you saying that using the local security poilicy packet filtering to
control network access to the machine is less secure than using ICF?

> --
>
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
>

Relevant Pages

  • Re: ipnat.conf - map and rdr wont work!
    ... You've got two competing firewall solutions loaded at the same time. ... so you say you use ipnat for redirect and map and ipfw for packet filtering. ... ipfilter wraps around the kernel and takes over all packet handling. ... All that traffic shaping you've done have no effect at all. ...
    (freebsd-questions)
  • Re: suggestions on router w/firewall
    ... of using NAT, even with SPI, as a firewall method. ... describe standard NAT as a firewall service. ... That sentence refers to four concepts: NAT, router, simple packet filtering, ... created port table to packet header info, and NAT does change the packet. ...
    (comp.security.firewalls)
  • RE: [Full-Disclosure] ISS Security Brief: "MS Blast" MSRPC DCOM Worm Propagation (fwd)
    ... Once you turn on the packet filtering, you either allow all, or deny all ... XP's "firewall" has several pre-defined higher layer protocols that ... #Full-Disclosure - We believe in it. ... in error, please contact us immediately at 816.421.6611, and delete the communication from any computer or network system. ...
    (Full-Disclosure)
  • Re: Firewall for VMS / TRU64
    ... >> you could run a VMS box as a firewall very effectively ... ... The packet filtering is just that packet filtering. ... The packet filtering capabilities of TCPWARE would probably not affect the work ...
    (comp.os.vms)
  • re: firewall high-load performance
    ... against ipfw, but I suspect that any difference in performance is pretty ... If you're just doing packet filtering and using a fairly run of ... was related to use of dummynet for bandwidth management. ... Just one more reason pf is my favorite firewall. ...
    (freebsd-questions)