TROL ti znaesh s toboy kak s brevnom! sorry
est 2 tipa firewalov! Home class i Server class (enterprise)
k home class otnosatsa takie firewali kak ZoneAlarm, SyGate, Outpost, McAfee, NPF, KAV anti-hacker i.t.d
k server classu otnosatsa takiefirewali kak Check Point Firewall-1, VisNetic firewall, Kerio network firewall e.t.c
tak vot po nadeznosti oni toze delatsa na 2 classa!
esli posle togo kak ti mena proscanil XSpiderom ti uvidel otkritie porti tipa 5555, 25, 8888 eto nezna4it 4to firewall sux! eto zna4it 4to u mena server a ne Workstation s 1 ftp serverom
nashet NPF!
4tob takih slov nebilo
Цитата: еще и еще раз повторю что Нортон самый лучший фаервул.
vot
http://lists.insecure.org/lists/vuln-dev/2003/Feb/0063.html Добавлено Цитата: DENY ALL aka БЛОКИРОВАТЬ ВСЕ
kstait tam po defoltu stoit
1. allow all traffic
tak 4to esli ti sam seba zanukal to firewall tut nepri4em
2. vot kakie pravila po defoltu stavatsa
ps pered tem kak smotret oznakomtes s opisaie parametrov v ()
My Address [113] <-> All Addresses [All Ports]
(LF) L – Log
T – Log TCP/IP Connections
B – Block Incoming TCP/IP Connections
F – Block Incoming Fragments
P – Log Entire Packet
C – Call a Plug-In Module
-----------------------------------------------------------------------------------------------------------
Deerfield.com VisNetic Firewall version 2.0.
Registration Key XXXX-XXXX-XXXX-XXXX. License expires on 17.12.2012
Operating System: Windows XP.
System name is 'HAKER'.
Current state is 'Filter Traffic'
Ruleset filename is C:\Documents and Settings\Sanja\My Documents\default_Rules.rul
Log filename is C:\Program Files\Deerfield.com\VisNetic Firewall\Logs\20030711.log
Firewall is set to start automatically on bootup.
When the firewall is not running, traffic is: Allowed.
Adapter 1: 'Internet', IP address='212.7.15.78', MAC address='00-50-22-40-0D-7C', medium='Ethernet'.
Adapter 2: 'Lan', IP address='192.168.0.1', MAC address='00-50-22-8D-9C-F1', medium='Ethernet'.
Adapter 3: 'VMware', IP address='169.254.218.201', MAC address='00-50-56-C0-00-08', medium='Ethernet'.
Adapter 4: 'Virtual PC', IP address='169.254.25.142', MAC address='00-50-56-C0-00-01', medium='Ethernet'.
Adapter 5: 'Dial-Up Adapter', IP address='', MAC address='00-00-00-00-00-00', medium='Ethernet'.
Adapter 1:
TCP rules:
My Address [113] <-> All Addresses [All Ports] (LF)
My Address [1024-5000] <-> All Addresses [All Ports] (TBF)
My Address [139] <-> All Addresses [All Ports] (LT)
UDP rules:
All Addresses [67-68] <-> All Addresses [67-68] (F)
My Address [1024-5000] <-> All Addresses [53] (F)
My Address [137-138] <-> All Addresses [137-138]
0.0.0.255/0.0.0.255 [All Ports] <-- All Addresses [All Ports]
ICMP rules:
All Addresses [10] --> 224.0.0.2 [10]
224.0.0.2 [10] <-- All Addresses [10]
My Address [8] <-> All Addresses [0] (F)
0.0.0.255/0.0.0.255 [0-255] <-- All Addresses [0-255]
All Addresses [0-255] <-> All Addresses [0-255] (L)
ARP rules:
All Addresses <-> All Addresses
Adapter 2:
TCP rules:
My Address [1024-5000] <-> All Addresses [All Ports] (TBF)
My Address [139] <-> All Addresses [All Ports] (LT)
UDP rules:
All Addresses [67-68] <-> All Addresses [67-68] (F)
My Address [1024-5000] <-> All Addresses [53] (F)
My Address [137-138] <-> All Addresses [137-138]
0.0.0.255/0.0.0.255 [All Ports] <-- All Addresses [All Ports]
ICMP rules:
All Addresses [10] --> 224.0.0.2 [10]
224.0.0.2 [10] <-- All Addresses [10]
My Address [8] <-> All Addresses [0] (F)
0.0.0.255/0.0.0.255 [0-255] <-- All Addresses [0-255]
All Addresses [0-255] <-> All Addresses [0-255] (L)
ARP rules:
All Addresses <-> All Addresses
Adapter 3:
TCP rules:
My Address [1024-5000] <-> All Addresses [All Ports] (TBF)
My Address [139] <-> All Addresses [All Ports] (LT)
UDP rules:
All Addresses [67-68] <-> All Addresses [67-68] (F)
My Address [1024-5000] <-> All Addresses [53] (F)
My Address [137-138] <-> All Addresses [137-138]
0.0.0.255/0.0.0.255 [All Ports] <-- All Addresses [All Ports]
ICMP rules:
All Addresses [10] --> 224.0.0.2 [10]
224.0.0.2 [10] <-- All Addresses [10]
My Address [8] <-> All Addresses [0] (F)
0.0.0.255/0.0.0.255 [0-255] <-- All Addresses [0-255]
All Addresses [0-255] <-> All Addresses [0-255] (L)
ARP rules:
All Addresses <-> All Addresses
Adapter 4:
TCP rules:
My Address [1024-5000] <-> All Addresses [All Ports] (TBF)
My Address [139] <-> All Addresses [All Ports] (LT)
UDP rules:
All Addresses [67-68] <-> All Addresses [67-68] (F)
My Address [1024-5000] <-> All Addresses [53] (F)
My Address [137-138] <-> All Addresses [137-138]
0.0.0.255/0.0.0.255 [All Ports] <-- All Addresses [All Ports]
ICMP rules:
All Addresses [10] --> 224.0.0.2 [10]
224.0.0.2 [10] <-- All Addresses [10]
My Address [8] <-> All Addresses [0] (F)
0.0.0.255/0.0.0.255 [0-255] <-- All Addresses [0-255]
All Addresses [0-255] <-> All Addresses [0-255] (L)
ARP rules:
All Addresses <-> All Addresses
Adapter 5:
-----------------------------------------------------------------------------------------------------------