[Xitami-Dev] Houston, we have a problem ...

[George Blat]

Rob:

I found that when I used ZoneAlarm the crackers were able to plant lots of 
their stuff
in my server, I spent a whole week cleaning up "services" that they were 
able to run
in my server. Most of these services were normal applications that 
companies such as
Compaq use to allow their technical support people to operate as remote 
control their
customers' machines to solve problems. Too bad that the "support" was not 
what I really
looked forward to. The warez gentlemen were able to stop my server twice, 
and I had
to change all my passwords several times.

After I installed Tiny (which like ZoneAlarm is also free) I was able to 
contain all this
circus. No more problems since, except seeing all the scanning that is 
going on and which
is very worrisome. Seems that in my NT machines the first thing they try is 
to get into
Netbios port to get the system to enumerate itself.

Anyway, I am glad everything is working for you.

George


At 08:56 AM 7/11/01 -0500, you wrote:
>George,
>
>Actually, I eventually got it to work. The trouble is that I have a
>Linksys router interposed between my PC and the Alcatel ADSL modem, and
>ZoneAlarm didn't know about the new version of Xitami I just installed.
>When it got a reply back from my router it was expecting to see a reply
>from my actual static IP number and panicked.
>
>They didn't build in a proxy setting into the free version, and I don't
>know if the paid-for one has it either. I got around it by plugging
>straight into the ADSL line, invoking Xitami, telling ZA that it was OK
>to let it be a server then going back to the original setup.
>
>But I will not ever be ONE DAY without a proper firewall again after
>seeing how many people scan the addresses. See also:
>
>http://judd.ob-wan.com/security.htm
>
>Rob Judd
>
> >My suggestion: Don't use ZoneAlarm for your Xitami server. It's great
>at
> >your workstation though.
> >When I opened ZoneAlarm enough the crackers/hackers came quickly.  I
>had a
> >far better
> >result with Tiny Personal Firewall. It takes a little time to set it
>up but
> >it can open the link
> >just enough for your server to be fully operational, but no more.
> >
> >George Blat
> >
> >
> >
> >At 06:41 PM 7/10/01 +1000, you wrote:
> >>Ewen,
> >>
> >>Solved. ZoneAlarm doesn't know about services!!!
> >>
> >>I'll report the bug to them.
> >>
> >>Grrr.
> >>
> >>Rob
> >>
> >>
> >>Ewen McNeill wrote:
> >> >
> >> > In message <3B4ABBB0.7D413736@alphalink.com.au>, Rob Judd writes:
> >> > >Xitami starts fine, but can't be accessed from the internet. I
>haven't
> >> > >tried any later builds because they haven't been available online
>AFAIK.
> >> > >My last view of the download site still listed 2.5b4 as the
>latest, and
> >> > >that was only last week.
> >> >
> >> > The new downloads are only on http://www.xitami.com/.
> >> >
> >> > http://www.imatix.com/ needs a more thorough overview so we
>haven't
> >> > tried to update that at this stage.
> >> >
> >> > >p.s. I have Xitami running as a service under BeOS now.
> >> >
> >> > Cool stuff.
> >> >
> >> > Ewen
> >> >
> >> > --
> >> > Ewen McNeill, Technical Consultant, iMatix Corporation
>www.imatix.com
> >> >
> >> > --
> >> > Xitami-Dev -- Xitami Development Mailing List
> >> > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-
>dev
> >>
> >>--
> >>Xitami-Dev -- Xitami Development Mailing List
> >>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
> >
> >George Blat
> >BRD
> >8016 188th SW, Edmonds, WA 98026
> >
> >phone:  425-775-7475
> >fax:    781-998-5940
> >
> >
> >--
> >Xitami-Dev -- Xitami Development Mailing List
> >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
> >
>
>--
>Xitami-Dev -- Xitami Development Mailing List
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev