RE: [Security400] Firewalls

["Wills, Mike N. (TC)" <MNWills@xxxxxxxxxxxxxx>]

So a TCP/IP buffer overflow won't crash Windows? Windows handles all TCP/IP
processing first so in essence it is still vulnerable.

-----Original Message-----
From: Douglas Handy [mailto:dhandy1@bellsouth.net]
Sent: Wednesday, June 12, 2002 10:50 PM
To: security400@midrange.com
Subject: Re: [Security400] Firewalls


Jim/John,

>> There are also fire walls that run on windows systems.

><opinion>I would not recommend a Win firewall. MS is still a long ways
>from securing it's operating system to the level of unix/linux.

While that is true, it may not be quite as bad as it sounds. Firewalls like
Winroute Pro actually preempt the OS and intercept all TCP/IP traffic to
apply
filters, NAT, port mapping, etc prior to Win 9x/NT/W2K/XP ever seeing the
traffic.

So with proper filtering you can create a black hole which blocks many
exploits
which may otherwise work under Windows.

Doug
_______________________________________________
This is the Security Administration on the AS400 / iSeries (Security400)
mailing list
To post a message email: Security400@midrange.com
To subscribe, unsubscribe, or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/security400
or email: Security400-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/security400.