PC Review


Reply
Thread Tools Rate Thread

BlackIce and file sharing

 
 
Freddo
Guest
Posts: n/a
 
      7th Aug 2004
Howdy,

I have BlackIce v3.6cbu (firewall) installed on my Windows XP computer.

Do you know of it? Help files therein are complicated to me.

Well BlackIce is preventing my friends etc to enter Www File Share Pro.

On the Tools / Edit settings / Firewall, should I drop down from Paranoid
and/or check Allow Internet file sharing?

What settings should I use to still allow protection?

By the way, I did Go Start / Settings / Network Connections / Advanced /
Settings and enter the port number 81 to use as File Share Pro Help said to
do.

Thanks everyone.


 
Reply With Quote
 
 
 
 
=?Utf-8?B?QWJyYW0gV2FnZW5hYXI=?=
Guest
Posts: n/a
 
      7th Aug 2004
Hi Freddo,

I think you could better visit the BlackIce homepage for support for that
program. It is located at http://www.iss.net.
In the last part of your post you are talking about the Windows Firewall?
The settings you configured for that are probably right but if BlackIce is
blocking the traffic that port, the Windows Firewall doesn't even get the
chance to let it through.

"Freddo" wrote:

> Howdy,
>
> I have BlackIce v3.6cbu (firewall) installed on my Windows XP computer.
>
> Do you know of it? Help files therein are complicated to me.
>
> Well BlackIce is preventing my friends etc to enter Www File Share Pro.
>
> On the Tools / Edit settings / Firewall, should I drop down from Paranoid
> and/or check Allow Internet file sharing?
>
> What settings should I use to still allow protection?
>
> By the way, I did Go Start / Settings / Network Connections / Advanced /
> Settings and enter the port number 81 to use as File Share Pro Help said to
> do.
>
> Thanks everyone.
>
>
>

 
Reply With Quote
 
Lester Stiefel
Guest
Posts: n/a
 
      7th Aug 2004
On Sat, 7 Aug 2004 19:19:02 +1000, Freddo wrote:

> Howdy,
>
> I have BlackIce v3.6cbu (firewall) installed on my Windows XP computer.
>
> Do you know of it? Help files therein are complicated to me.
>
> Well BlackIce is preventing my friends etc to enter Www File Share Pro.
>
> On the Tools / Edit settings / Firewall, should I drop down from Paranoid
> and/or check Allow Internet file sharing?
>
> What settings should I use to still allow protection?
>
> By the way, I did Go Start / Settings / Network Connections / Advanced /
> Settings and enter the port number 81 to use as File Share Pro Help said to
> do.
>
> Thanks everyone.


Defintely go down a rank. Paranoid kills most traffic. Also
turn on the allow the internet filesharing. Check into
saving activity logs in the rules you create for the
specific program.
--
Lester Stiefel
In 2 Timothy 3:1-7, there is a list of the qualities that
Unregenerate man will have in the last days. More Info in
2Timothy 3. Is your quality found there?
 
Reply With Quote
 
Freddo
Guest
Posts: n/a
 
      7th Aug 2004

"Abram Wagenaar" <(E-Mail Removed)> wrote in message
news:3BA8710F-5D6E-484D-9411-(E-Mail Removed)...
> Hi Freddo,
>
> I think you could better visit the BlackIce homepage for support for that
> program. It is located at http://www.iss.net.
> In the last part of your post you are talking about the Windows Firewall?
> The settings you configured for that are probably right but if BlackIce is
> blocking the traffic that port, the Windows Firewall doesn't even get the
> chance to let it through.
>
> "Freddo" wrote:
>
> > Howdy,
> >
> > I have BlackIce v3.6cbu (firewall) installed on my Windows XP computer.
> >
> > Do you know of it? Help files therein are complicated to me.
> >
> > Well BlackIce is preventing my friends etc to enter Www File Share Pro.
> >
> > On the Tools / Edit settings / Firewall, should I drop down from

Paranoid
> > and/or check Allow Internet file sharing?
> >
> > What settings should I use to still allow protection?
> >
> > By the way, I did Go Start / Settings / Network Connections / Advanced /
> > Settings and enter the port number 81 to use as File Share Pro Help said

to
> > do.
> >
> > Thanks everyone.
> >

Thanks Abram,
Anyone know what BlackIce settings to use for Www File Share Pro (see
above)? Should I drop down from Paranoid and/or check Allow Internet file
sharing?


 
Reply With Quote
 
Freddo
Guest
Posts: n/a
 
      7th Aug 2004

"Lester Stiefel" <(E-Mail Removed)> wrote in message
news:8n52rhck963w$.907278bt22ng$.(E-Mail Removed)...
> On Sat, 7 Aug 2004 19:19:02 +1000, Freddo wrote:
>
> > Howdy,
> >
> > I have BlackIce v3.6cbu (firewall) installed on my Windows XP computer.
> >
> > Do you know of it? Help files therein are complicated to me.
> >
> > Well BlackIce is preventing my friends etc to enter Www File Share Pro.
> >
> > On the Tools / Edit settings / Firewall, should I drop down from

Paranoid
> > and/or check Allow Internet file sharing?
> >
> > What settings should I use to still allow protection?
> >
> > By the way, I did Go Start / Settings / Network Connections / Advanced /
> > Settings and enter the port number 81 to use as File Share Pro Help said

to
> > do.
> >
> > Thanks everyone.

>
> Defintely go down a rank. Paranoid kills most traffic. Also
> turn on the allow the internet filesharing. Check into
> saving activity logs in the rules you create for the
> specific program.


Lester,
Not sure what you mean by "Check into saving activity logs in the rules you
create for the specific program."


 
Reply With Quote
 
Duane Arnold
Guest
Posts: n/a
 
      7th Aug 2004
"Freddo" <(E-Mail Removed)> wrote in
news:4114bb2b$0$2542$(E-Mail Removed):

>
> "Lester Stiefel" <(E-Mail Removed)> wrote in message
> news:8n52rhck963w$.907278bt22ng$.(E-Mail Removed)...
>> On Sat, 7 Aug 2004 19:19:02 +1000, Freddo wrote:
>>
>> > Howdy,
>> >
>> > I have BlackIce v3.6cbu (firewall) installed on my Windows XP
>> > computer.
>> >
>> > Do you know of it? Help files therein are complicated to me.
>> >
>> > Well BlackIce is preventing my friends etc to enter Www File Share
>> > Pro.
>> >
>> > On the Tools / Edit settings / Firewall, should I drop down from

> Paranoid
>> > and/or check Allow Internet file sharing?
>> >
>> > What settings should I use to still allow protection?
>> >
>> > By the way, I did Go Start / Settings / Network Connections /
>> > Advanced / Settings and enter the port number 81 to use as File
>> > Share Pro Help said

> to
>> > do.
>> >
>> > Thanks everyone.

>>
>> Defintely go down a rank. Paranoid kills most traffic. Also
>> turn on the allow the internet filesharing. Check into
>> saving activity logs in the rules you create for the
>> specific program.

>
> Lester,
> Not sure what you mean by "Check into saving activity logs in the
> rules you create for the specific program."
>
>
>



I suggest that you do not enable Internet File Sharing on BID, which will
open ports 137-138 UDP and 139/ (445 NT only) TCP the Windows Networking
Ports to the public Internet.

I suggest that you create a rule with the Advanced Firewall Setting in BI
for a specified inbound port you need opened on the BI firewall.

Name: My Port
IP: xxx.xxx.xxx.xxx or All IP(s)
Port: 81
Type: UDP or TCP
ACCEPT which enables the IDS on the port
Duration: time frame.

You should leave BID on its highest settings *Paranoid*.
You should set the rule to a REJECT rule when you are done.
You should enable BID's Logging and use VisualIce (free) BID logviwer to
view the logs.

You should secure the O/S from attack *harden* it.

http://www.uksecurityonline.com/index5.php

You should also use Active Ports free and put a short-cut in the Start
folder setting the Refresh Rate to High so that you can see inbound and
outbound connections on the machine as malware can circumvent and defeat
any 3rd party PFW solution. You should use Active Ports on a routine
basis and look around from time to time.

http://www.windowsecurity.com/articl...jan_Horses_and
_Rootkit_Tools_in_a_Windows_Environment.html

Duane









 
Reply With Quote
 
Freddo
Guest
Posts: n/a
 
      8th Aug 2004

"Duane Arnold" <(E-Mail Removed)> wrote in message
news:Xns953E58B868A84notmenotmecom@216.148.227.77...
> "Freddo" <(E-Mail Removed)> wrote in
> news:4114bb2b$0$2542$(E-Mail Removed):
>
> >
> > "Lester Stiefel" <(E-Mail Removed)> wrote in message
> > news:8n52rhck963w$.907278bt22ng$.(E-Mail Removed)...
> >> On Sat, 7 Aug 2004 19:19:02 +1000, Freddo wrote:
> >>
> >> > Howdy,
> >> >
> >> > I have BlackIce v3.6cbu (firewall) installed on my Windows XP
> >> > computer.
> >> >
> >> > Do you know of it? Help files therein are complicated to me.
> >> >
> >> > Well BlackIce is preventing my friends etc to enter Www File Share
> >> > Pro.
> >> >
> >> > On the Tools / Edit settings / Firewall, should I drop down from

> > Paranoid
> >> > and/or check Allow Internet file sharing?
> >> >
> >> > What settings should I use to still allow protection?
> >> >
> >> > By the way, I did Go Start / Settings / Network Connections /
> >> > Advanced / Settings and enter the port number 81 to use as File
> >> > Share Pro Help said

> > to
> >> > do.
> >> >
> >> > Thanks everyone.
> >>
> >> Defintely go down a rank. Paranoid kills most traffic. Also
> >> turn on the allow the internet filesharing. Check into
> >> saving activity logs in the rules you create for the
> >> specific program.

> >
> > Lester,
> > Not sure what you mean by "Check into saving activity logs in the
> > rules you create for the specific program."
> >
> >
> >

>
>
> I suggest that you do not enable Internet File Sharing on BID, which will
> open ports 137-138 UDP and 139/ (445 NT only) TCP the Windows Networking
> Ports to the public Internet.
>
> I suggest that you create a rule with the Advanced Firewall Setting in BI
> for a specified inbound port you need opened on the BI firewall.
>
> Name: My Port
> IP: xxx.xxx.xxx.xxx or All IP(s)
> Port: 81
> Type: UDP or TCP
> ACCEPT which enables the IDS on the port
> Duration: time frame.
>
> You should leave BID on its highest settings *Paranoid*.
> You should set the rule to a REJECT rule when you are done.
> You should enable BID's Logging and use VisualIce (free) BID logviwer to
> view the logs.
>
> You should secure the O/S from attack *harden* it.
>
> http://www.uksecurityonline.com/index5.php
>
> You should also use Active Ports free and put a short-cut in the Start
> folder setting the Refresh Rate to High so that you can see inbound and
> outbound connections on the machine as malware can circumvent and defeat
> any 3rd party PFW solution. You should use Active Ports on a routine
> basis and look around from time to time.
>
> http://www.windowsecurity.com/articl...jan_Horses_and
> _Rootkit_Tools_in_a_Windows_Environment.html
>
> Duane


Wow Duane, that's invaluable information.
I have been enlightened by reading some of the two security sites you
mention.
I have installed Active Ports and VisualIce, so interesting.
I have the file sharing program start up when windows starts so people can
share. Therefore I shall leave the above B-Ice setting on ACCEPT and
duration on FOREVER, hey.
Cheers and all the best.

And thanks to everyone who replied.


 
Reply With Quote
 
 
 
Reply

Thread Tools
Rate This Thread
Rate This Thread:

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Locks on BlackICE\hosts lenG Security and Anti-Spyware Community 0 31st Mar 2005 01:15 AM
New Worm targets BlackICE vulnerability Axel Pettinger Anti-Virus 43 19th May 2004 07:44 PM
blackice won't install josh Windows XP Security 0 21st Mar 2004 11:01 PM
Virtual PC's compatibility with BlackICE Dave Arnold Microsoft Windows 2000 Macintosh 0 22nd Oct 2003 01:16 AM
WINDOWS XP AND BLACKICE RON SCOTT Windows XP Security 0 12th Aug 2003 03:12 AM


Features
 

Advertising
 

Newsgroups
 


All times are GMT +1. The time now is 02:10 AM.