Re: [CAD_CAM_EDM_DRO] eGroups/ worms/ virus

Doug Harrison wrote:

> >. Microsoft can interrogate your computer via a back door that is
> programmed into Windows...
> >
>
> I've always maintained that some of the so-called security bugs in the
> IE/W95/W98 platform were put there specifically for this purpose.
>
> Would a server running Linux act as a sufficient firewall for this kind of
> intrusion? I'm assuming that computers tied to the server would be
> transparent to the outside world.
>
> Doug
>
>

Hi Doug
Any serious firewall works very hard to isolate the outside world from your intranet. Address translation via ip masquerading or
chains is only the first step. One should then disable all net services not needed to the outside world. ie. telnet, rlogin, etc.
Use proxies when possible to xfer info across the barrier.
ip masquerading runs with internal ip's in the 192.168.x.x range and ip chains uses 10.10.x.x both ranges are not valid internet
addresses e.g. none of your internal addresses had better ever show up in the real world but are meant to be run in isolated
enviroments.
Get the Linux firewall HOWTO as a starter. O"Reilly also has a good book on firewalls.
I think it is a little risky to expose your server to the internet.
Good luck.

dave