Dear List,

we use our Internet Scanner mainly for external Scans while directly connected to the 
big bad internet. For me it would be interesting to hear how other internet scanner 
users try to secure the scanning host. One bad thing in IS 7.0 is the dependance on 
MSDE which I think must not be directly connected to the net. It is possible to stop 
MSDE from listening on 1433/tcp via disablenetworkprotocols=1 during installation but 
1434/udp is nevertheless active. I thought about using ipsecpol for blacklisting 
incoming connections to some services, 1434/udp should be no problem but what about 
RPC (135/tcp) and the SMB/NetBIOS Ports? Does this interfere with IS? Any hint would 
be welcome.

Regards
Bjoern

_______________________________________________
ISSForum mailing list
[EMAIL PROTECTED]

TO UNSUBSCRIBE OR CHANGE YOUR SUBSCRIPTION, go to 
https://atla-mm1.iss.net/mailman/listinfo

Reply via email to