[Xitami-Dev] Houston, we have a problem ...

[Rob Judd]

George,

When you say "services" I assume you mean that in the NT sense, as a 
system service. There's a registry patch that makes this impossible, 
see www.grc.com

I'm currently running the server in the Linksys "DMZ" fully visible, 
but only while I set up the system. It also has firewall capability, 
and allows me to open up just the required ports, as you suggested. 
That's the way I'll be going in the long term. Still testing right now.

Rob


>Rob:
>
>I found that when I used ZoneAlarm the crackers were able to plant 
lots of 
>their stuff
>in my server, I spent a whole week cleaning up "services" that they 
were 
>able to run
>in my server. Most of these services were normal applications that 
>companies such as
>Compaq use to allow their technical support people to operate as 
remote 
>control their
>customers' machines to solve problems. Too bad that the "support" was 
not 
>what I really
>looked forward to. The warez gentlemen were able to stop my server 
twice, 
>and I had
>to change all my passwords several times.
>
>After I installed Tiny (which like ZoneAlarm is also free) I was able 
to 
>contain all this
>circus. No more problems since, except seeing all the scanning that is 
>going on and which
>is very worrisome. Seems that in my NT machines the first thing they 
try is 
>to get into
>Netbios port to get the system to enumerate itself.
>
>Anyway, I am glad everything is working for you.
>
>George
>
>
>At 08:56 AM 7/11/01 -0500, you wrote:
>>George,
>>
>>Actually, I eventually got it to work. The trouble is that I have a
>>Linksys router interposed between my PC and the Alcatel ADSL modem, 
and
>>ZoneAlarm didn't know about the new version of Xitami I just 
installed.
>>When it got a reply back from my router it was expecting to see a 
reply
>>from my actual static IP number and panicked.
>>
>>They didn't build in a proxy setting into the free version, and I 
don't
>>know if the paid-for one has it either. I got around it by plugging
>>straight into the ADSL line, invoking Xitami, telling ZA that it was 
OK
>>to let it be a server then going back to the original setup.
>>
>>But I will not ever be ONE DAY without a proper firewall again after
>>seeing how many people scan the addresses. See also:
>>
>>http://judd.ob-wan.com/security.htm
>>
>>Rob Judd
>>
>> >My suggestion: Don't use ZoneAlarm for your Xitami server. It's 
great
>>at
>> >your workstation though.
>> >When I opened ZoneAlarm enough the crackers/hackers came quickly.  
I
>>had a
>> >far better
>> >result with Tiny Personal Firewall. It takes a little time to set 
it
>>up but
>> >it can open the link
>> >just enough for your server to be fully operational, but no more.
>> >
>> >George Blat
>> >
>> >
>> >
>> >At 06:41 PM 7/10/01 +1000, you wrote:
>> >>Ewen,
>> >>
>> >>Solved. ZoneAlarm doesn't know about services!!!
>> >>
>> >>I'll report the bug to them.
>> >>
>> >>Grrr.
>> >>
>> >>Rob
>> >>
>> >>
>> >>Ewen McNeill wrote:
>> >> >
>> >> > In message <3B4ABBB0.7D413736@alphalink.com.au>, Rob Judd 
writes:
>> >> > >Xitami starts fine, but can't be accessed from the internet. I
>>haven't
>> >> > >tried any later builds because they haven't been available 
online
>>AFAIK.
>> >> > >My last view of the download site still listed 2.5b4 as the
>>latest, and
>> >> > >that was only last week.
>> >> >
>> >> > The new downloads are only on http://www.xitami.com/.
>> >> >
>> >> > http://www.imatix.com/ needs a more thorough overview so we
>>haven't
>> >> > tried to update that at this stage.
>> >> >
>> >> > >p.s. I have Xitami running as a service under BeOS now.
>> >> >
>> >> > Cool stuff.
>> >> >
>> >> > Ewen
>> >> >
>> >> > --
>> >> > Ewen McNeill, Technical Consultant, iMatix Corporation
>>www.imatix.com
>> >> >
>> >> > --
>> >> > Xitami-Dev -- Xitami Development Mailing List
>> >> > To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami
-
>>dev
>> >>
>> >>--
>> >>Xitami-Dev -- Xitami Development Mailing List
>> >>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-
dev
>> >
>> >George Blat
>> >BRD
>> >8016 188th SW, Edmonds, WA 98026
>> >
>> >phone:  425-775-7475
>> >fax:    781-998-5940
>> >
>> >
>> >--
>> >Xitami-Dev -- Xitami Development Mailing List
>> >To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
>> >
>>
>>--
>>Xitami-Dev -- Xitami Development Mailing List
>>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
>
>
>--
>Xitami-Dev -- Xitami Development Mailing List
>To unsubscribe: http://lists.xitami.org/mailman/listinfo/xitami-dev
>