|
From: Bobble H. <bob...@ho...> - 2006-03-23 09:43:39
|
Thanks, my misunderstanding of the DMZ, thanks for clarifing this for me. Confusing as if you look at this web site: h**p://compnetworking.about.com/cs/networksecurity/g/bldef_dmz.htm it suggests the DMZ is outside the firewall, I now know better! I will look at the rules as you suggested, thanks for the advice. >From: "Moray McConnachie" <mmc...@ox...> >Reply-To: dev...@li... >To: <dev...@li...> >Subject: RE: [Devil-Linux-discuss] DMZ Problem >Date: Wed, 22 Mar 2006 14:09:46 -0000 > >Even though you have a DMZ set-up, it is not designed to let any traffic >through from the WAN (internet) into the DMZ except what you expressly >allow to go through in the firewall rules. There's a bunch of sample >rules in /etc/init.d/firewall.rules. > >Personally I would NEVER put a windows box on the internet unprotected. >Recent surveys have shown that unprotected PCs put on broadband have >hacking attempts made against them within 20 minutes of being online. > >Yours, >Moray > > >------------------------------------- >Moray McConnachie >IS Manager +44 1865 261 600 >Oxford Analytica http://www.oxan.com > >-----Original Message----- >From: dev...@li... >[mailto:dev...@li...] On Behalf Of >Bobble Hat >Sent: 22 March 2006 13:54 >To: dev...@li... >Subject: [Devil-Linux-discuss] DMZ Problem > >I am using Devil-Linux 1.2.9-i586 and have configured it using the setup >command as a basic three card firewall (with DMZ). I have connected a >client PC (WinXP with software firewall disabled) on the DMZ network, >but when I use ShieldsUp! (www.grc.com), to check my port status it's >saying they are all closed. Shouldn't I be seeing some ports open like >NetBIOS (139)? it seems as though it is firewalled too? > >_________________________________________________________________ >Are you using the latest version of MSN Messenger? Download MSN >Messenger >7.5 today! http://join.msn.com/messenger/overview > > > >------------------------------------------------------- >This SF.Net email is sponsored by xPML, a groundbreaking scripting >language >that extends applications into web and mobile media. Attend the live >webcast >and join the prime developer group breaking into this new coding >territory! >http://sel.as-us.falkag.net/sel?cmd=lnk&kid=110944&bid=241720&dat=121642 >_______________________________________________ >Devil-linux-discuss mailing list >Dev...@li... >https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss > > >------------------------------------------------------- >This SF.Net email is sponsored by xPML, a groundbreaking scripting language >that extends applications into web and mobile media. Attend the live >webcast >and join the prime developer group breaking into this new coding territory! >http://sel.as-us.falkag.net/sel?cmd=lnk&kid0944&bid$1720&dat1642 >_______________________________________________ >Devil-linux-discuss mailing list >Dev...@li... >https://lists.sourceforge.net/lists/listinfo/devil-linux-discuss _________________________________________________________________ Are you using the latest version of MSN Messenger? Download MSN Messenger 7.5 today! http://join.msn.com/messenger/overview |