Maybe a little off the wall but can you connect modem to modem with
something like PC Anywhere? Not sure how ZA or other packages work against
Modem connections but it might be a possibility. This might allow you to
install and configure ZA or something else. I remember the old days of
having to drop PCAnywhere into the startup, with auto answer set to on, so
that I could reboot the server as needed and still connect to it. Those were
the days ;-)

Stephen

-----Original Message-----
From: John Munyan [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 1:17 PM
To: CF-Server
Subject: RE: Firewall Software


Another thing I forgot was you might consider the use of terminal server
(with high encryption enforced) to attach to the box for installation
and administration.  This would only require 3389 be open (and 80
presumably).  This might be a very good solution in conjunction with
port filtering.  Allow only 80 and 3389 deny everything else.  If
someone is going to hack you it will be via brute forcing the password
to log in via ts, or an application bug.  This solution is cheap and
effective.

John

-----Original Message-----
From: Mike Townend [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 8:36 AM
To: CF-Server
Subject: RE: Firewall Software

AFAIK it will lock the machine down... Of the firewall software
solutions
ive seen they all lock the machine down then on a per connection basis
ask
whether you wish to allow the connection,

The Kerio personal firewall  you mentioned earlier does the same, on
startup
it will start asking whether to allow the connection.

I supose what you could do is install a copy locally and create a rule
that
would allow your IP as a trusted zone, then workout where it stores this
information and see if you can extract and add it the live server so
that
when the server has finished rebooting it already has the information
about
your IP and so allows the connection... This tho will probably not work,
just a thought.

Best solution would be to get access to the machine for the install

HTH



-----Original Message-----
From: Adam Reynolds [mailto:[EMAIL PROTECTED]]
Sent: Friday, September 20, 2002 16:23
To: CF-Server
Subject: RE: Firewall Software


Dylan,
This is a coldfusion SERVER related issue. Don't get arsy with me. The
original question was about Firewall Software (for a Win2000 server)
this is
on-topic for this list.

I do not have the option of a superior hardware solution which is why
the
subject matter was Firewall SOFTWARE. I did not want this topic going
off on
a discussion about hardware solutions which would not have been of any
benefit to me, the person who originally asked the question.

If you wish to spawn a discussion on hardware firewall solutions, please
change the subject header to "Firewall Hardware (was Firewall
Software)".


Todd,
Do you know if the McAfee Firewall isolated the machine (similar to the
way
Zone Alarm works) the first time it fired up and you then had to enable
access to the machine?

I am remotely administering the machine, so this type of isolation would
mean a physical trip to the machine, which I really do not want to do.


Adam

> -----Original Message-----
> From: Dylan Bromby [mailto:[EMAIL PROTECTED]]
> Sent: 20 September 2002 15:40
> To: CF-Server
> Subject: RE: Firewall Software
>
>
> If you want to stay on-topic you might consider posting CF-related
> issues.
>
> -----Original Message-----
> From: Adam Reynolds [mailto:[EMAIL PROTECTED]]
> Sent: Friday, September 20, 2002 5:47 AM
> To: CF-Server
> Subject: RE: Firewall Software
>
>
> Can we keep this on topic!
>
> I am looking for a software solution, not hardware. :)
>
> Personal recommendations of Software Firewalls only and those that
> don't shut everything down when they first start up as I will lose
> contact with the remote server.
>
> Adam
>
> > -----Original Message-----
> > From: Chris Combs [mailto:[EMAIL PROTECTED]]
> > Sent: 20 September 2002 13:39
> > To: CF-Server
> > Subject: RE: Firewall Software
> >
> >
> > Why would one want to use software rather than a hardware firewall?
> >
> > Chris Combs
> >
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
> > Sent: Friday, September 20, 2002 8:39 AM
> > To: CF-Server
> > Subject: Re: Firewall Software
> >
> >
> > I use and like McAfee Firewall.  I remember reading an article
> > somewhere that there were two firewall software that was recommened,

> > zone alarm and then this other one.  Couldn't find it because
> > basically McAfee bought them out.  Great package, does everything I
> > want it to do.  You can tell it what ports to open.  You can ban
> > ips, setup trusted ips, etc.  If you get the Firewall+, you can do a

> > trace on that ip address and it'll show you (roughly) where it is in

> > the world.
> >
> > ~Todd
> >
> > On Fri, 20 Sep 2002, Adam Reynolds wrote:
> >
> > > Anybody have any Firewall recommendations for a Win2000 server?
> > >
> > > Kerio has been recommended to me.
> > >
> > > I was wondering if other people have had good experiences with
> > > other
>
> > > packages.
> > >
> > > Zone Alarm is a no no as this piece of the server is remotely
> > > maintained
> > and
> > > when you run Zone, it shuts the pc off from the world initially.
> > >
> > > Adam
> >
> > -- ============================================================
> > Todd Rafferty ([EMAIL PROTECTED]) - http://www.web-rat.com/ |
> >         Team Macromedia Volunteer for ColdFusion           |
> > http://www.macromedia.com/support/forums/team_macromedia/  |
> > http://www.flashCFM.com/   - webRat (Moderator)            |
> > http://www.ultrashock.com/ - webRat (Back-end Moderator)   |
> > ============================================================
> >
> >
> >
>
>



______________________________________________________________________
Get the mailserver that powers this list at http://www.coolfusion.com
------------------------------------------------------------------------------
To unsubscribe, send a message to [EMAIL PROTECTED] with 
'unsubscribe' in the body or visit the list page at www.houseoffusion.com

Reply via email to