D&C GLug - Home Page

[ Date Index ] [ Thread Index ] [ <= Previous by date / thread ] [ Next by date / thread => ]

Re: [LUG] Password checking

 

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Henry Bremridge wrote:

>The article just triggered a thought. I believe that the company is
>about to move from WinXP to Debian as a matter of policy (one user
>turned their firewall off, did something silly and we got hit by some
>16,000 bits of email in under 24 hours. The webhost was very helpful but
>turned off 90% of the users for 4 days until we confirmed that every
>last virus was removed. A bit of a problem for a company that runs on
>email).

To do a basic check of what ports are open from a particular machine I
highly recommend the ShieldsUp! utility on www.grc.com which needs you
initially to OK connection to your PC then probes all 65535 ports and
produces a report of what it could and couldn't connect to.  With a
firewall such as Zone Alarm in Windows the result was "no ports open,
everything running in Stealth mode."

Running that from a networked PC you can get a rough idea of what the
perimeter security is like, but as Simon said that's probably the last
place to look.  I recently did a report for University on a mythical
company that had net access and wanted to increase their security.
Possibly I went a bit far as a SysAdmin friend looked at my 12
recommendations and said "err.. I think we do three of them!" ;)

Kind regards,

Julian
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDs8dTjs/5IBdCO1ERApeVAJ4iLwSuHfHftwulTinH9l/BSaKC4ACffGFX
0GQ1hHJfOPzI8C9fB8fxaq4=
=XGJM
-----END PGP SIGNATURE-----


--
The Mailing List for the Devon & Cornwall LUG
Mail majordomo@xxxxxxxxxxxxx with "unsubscribe list" in the
message body to unsubscribe. FAQ: www.dcglug.org.uk/linux_adm/list-faq.html