Hello Anne,

Monday, October 20, 2003, 1:40:34 AM, you wrote:

>> Remove **ALL** M$ software from the computer, except the OS (as
>> best you can since it's 'all OS'). Especially do not allow access
>> to Outlook or IE. Remove ANY way to launch these.
>>
AW> This done from the start.  She uses no M$ software at all.  Lotus 
AW> SmartSuite is her office suite, and Mozila her mail/browser.

Hmmm... I would think that this would reduce the risk quite a lot.
Assuming she does NOT open email attachments, it might be good to look
elsewhere for the problems.

>> A lot of bad stuff comes via the web, especially if you are
>> concerned about privacy. My favorite browser is Opera, again
>> because it uses no Win components. The key to browsing safely and
>> with a bit of privacy is to use a proxy, no matter which browser
>> you use. I favor Proxomitron and DNSkong. Together, they can give
>> an essentially ad-free browsing experience, also blocking almost
>> all the snoops. You can get configuration info, including
>> pre-configured files and many details at
>> http://www.geocities.com/yosponge/ .
>>
AW> I don't think she would consider that part to be a priority.

I mostly discussed privacy, but there is a lot of bad stuff possible
through the web also. If email attachments can be ruled out, could it
be spyware or a Trojan rather than a virus?

>> Put in a firewall. For firewalls, I used to use Zone Alarm, but
>> moved to Kerio. Much better, IMHO. Kerio is going through some
>> upheaveals now, and I would NOT use their latest version. Get
>> version 2.1.4 or 2.1.5. yosponge also has good sets of
>> pre-configured firewall rules for Kerio. You'll be solid as a rock
>> with it. Sygate is also good, if you're a bit nervous about the
>> current status of Kerio.
>>
AW> I'll look further into this one.  It has to be something that doesn't 
AW> need much in the way of user intervention.  I was happy with ZA when 
AW> I ran it, but it needed me to make the decisions, training it.  She 
AW> would probably not be happy with that.  I know that means 
AW> compromises, but we may have to accept that.

Letting a naive user set the rules during training is inviting
trouble. I would strongly recommend using a pre-configured rule set
instead. This also would not need a long sequence of answers to what
will probably be incomprehensible questions, and keeps her happier.
Likely much safer too.

If she connects directly to the net, it is ESSENTIAL that she have a
firewall, IMHO. Way too risky without one. Given she uses no M$ apps,
this might be the biggest hole, and the source of her problems.

>> Just a few ideas...

AW> And much appreciated.  Thanks

You're quite welcome. Glad to help.

-- 

 rikona                            mailto:[EMAIL PROTECTED]


Want to buy your Pack or Services from MandrakeSoft? 
Go to http://www.mandrakestore.com

Reply via email to