Želite več od vašega osebnega požarnega zidu? / Do you want to get more from your personal firewall?

Leave a reply

Večkrat me uporabniki vprašajo o dejanski učinkovitosti osebnih požarnih zidov. Za vse tiste, ki večkrat s svojimi računalniki gostujete v tujih omrežjih priporočam ogled spodnjih dveh brezplačnih “požarnih rešitev”. Izdelka sta zagotovo primerna tudi za manjša podjetja, ki nimajo sofisticiranega korporativnega požarnega zidu. / I am often asked by users about the efficiency of personal firewall. I suggest to anyone who roam with it’s machine in different networks (partners networks, wi-fi hotspots …) to use personal firewall – maybe one of two free solutions on the links mentioned below. This two solutions can be also used as small business solution – in an enterprise without it’s own corporate firewall solution. Take a look.

Hvala Tomažu / Thanks to Tomaž (http://www.macus.info) / http://www.nevarnost.org

Comodo Personal firewall
Jetico Personal firewall – freeware

Kako lahko preprost predstavitveni CD pošlje vaša gesla po elektronski pošti nepridipravu… / How can a simple presentation CD send your password stored in your protected storage to the hacker…

Leave a reply

Potrebujemo tri komponente / all we need are this three components:

  • autorun.bat – datoteka, ki jo poženemo skozi autorun.inf / batch procedure that is called by autorun.inf

Edini način za zaustavitev takšnega početja je / The only way to disable souch activity is to:

  • vključitev požarnega zidu navzven (SMTP promet se omeji / zapremo vrata 25) / turning the firewall on (SMTP traffic should be limited / closed port 25) (dodatna težava: kaj pa če poštni strežnik posluša na vratih 80?!? / extra truble: what if the mail server listens on port 80?!?)
  • (mogoče najpomembnejša alineja) morda biti malce nezaupljiv 🙂 / (maybe the most important thing…) Do not trust just anybody! 🙂

Ko se sprašuješ o firewallu in usmerjevalniku… / When you are asking about what kind of firewall and router to use…

Leave a reply

V zadnjem času sem kar precej časa posvetil dvema odprtokodnima firewalloma/routerjema, m0n0wall-u ter pfSense-u. Celotna mreža kiWi-Fi network je postavljena na m0n0wallu. Obe zadevi delujeta super tudi v specifičnih režimih delovanja (transparent firewall, dodatni programski paketi (pfSense) …)

In the past weeks I spent some time to check the two opensource firewall/router programs: m0n0wall and pfSense. The kiWi-Fi network infrastructure is based on m0n0wall. Both produts work perfectly even in complex and specific environment (transparent firewall, extra packages (pfSense) …).

Že večkrat so me ljudje spraševali o znanih težavah – preveliki količini sej (še posebej ob uporabi raznih *donkey *mule in podobnih P2P programih). Za vse tiste je primeren spodaj naveden članek. “Računica” pa je nakako takšna: 32MB RAMa = 30000 sej. 🙂

Some people asked me about the known troubles using low cost routers – too many sessions (when using *donkey and *emule like p2p programs). For all that have questions regarding this problem there is a link below. The calculation is quite simple: 32MB of RAM = 30000 sessions. 🙂

http://www.openbsd.org/faq/pf/perf.html
http://m0n0.ch/wall/
http://www.pfsense.com/