Re: [LUAU] IP address on Cable

2011-03-04 Thread Julian Yap
--- On Thu, 3/3/11, Jon j...@destar.net wrote:
 However, I see most malware through compromised sites and ads, via the web 
 these days.
 
 I'll second Jon's suggestion of FireFox/NoScript for tech savvy folks. For 
 others, start with an ad blocker and Chrome if Win7/IE8 doesn't seem to be 
 doing the trick.

I'd also recommend disabling Java.  A lot of 'ads' on certain sites silently 
install stuff via Java.

.. A benefit of 'app stores' is that they don't contain malware/spyware (except 
Android's).  In my experience 'users' will always want to install things.  It's 
a PC, you can't stop that.  It's difficult to differentiate between what is a 
good application to install and what could happen if you install something so 
that you can see that greeting card that your friend sent you.  Or try telling 
your nephew that installing free dolphin screen savers isn't a good thing (and 
neither is going to those sites which offer them).

In a way we're moving to these application silos because Windows isn't working 
out...  Because all these suggestions shouldn't be necessary.

- Julian

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-04 Thread David Kiwerski

Here's an interesting site for this problem:

http://noscript.net/faq

Dave



On 03/04/2011 01:13 AM, Julian Yap wrote:

--- On Thu, 3/3/11, Jonj...@destar.net  wrote:

However, I see most malware through compromised sites and ads, via the web 
these days.

I'll second Jon's suggestion of FireFox/NoScript for tech savvy folks. For 
others, start with an ad blocker and Chrome if Win7/IE8 doesn't seem to be 
doing the trick.

I'd also recommend disabling Java.  A lot of 'ads' on certain sites silently 
install stuff via Java.

.. A benefit of 'app stores' is that they don't contain malware/spyware (except 
Android's).  In my experience 'users' will always want to install things.  It's 
a PC, you can't stop that.  It's difficult to differentiate between what is a 
good application to install and what could happen if you install something so 
that you can see that greeting card that your friend sent you.  Or try telling 
your nephew that installing free dolphin screen savers isn't a good thing (and 
neither is going to those sites which offer them).

In a way we're moving to these application silos because Windows isn't working 
out...  Because all these suggestions shouldn't be necessary.

- Julian

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-04 Thread Al Plant

Vince Hoang wrote:

On Mar 3, 2011, at 12:36 PM, Al Plant n...@hdk5.net wrote

Does anyone on the list have experience with a firewall on an Oceanic cable 
feed? Linux or Freebsd is what I use,.but I only have experience with firewalls 
on Telcom lines.


IP is IP. It doesn't matter if your provider hands you cable, DSL, Ethernet or 
wireless; you protect it the same way.


I am trying to help a guy with a Windows 7 box.  He has netflix on this cable 
too so it may have a fixed IP.

He gets attacked a lot with viruses and other weirdness even with Norton on the 
box.

Any suggestions appreciated.


If you have a gateway that does NAT, you are shielded from most of the network 
based attacks.

However, I see most malware through compromised sites and ads, via the web 
these days.

I'll second Jon's suggestion of FireFox/NoScript for tech savvy folks. For 
others, start with an ad blocker and Chrome if Win7/IE8 doesn't seem to be 
doing the trick.

My best suggestion is to have 1 PC that has no network access or is only used 
to visit financial sites and a 2nd PC for recreational use.

-Vince

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Aloha,

Thanks for the excellent suggestions.

--

~Al Plant - Honolulu, Hawaii -  Phone:  808-284-2740
  + http://hawaiidakine.com + http://freebsdinfo.org +
  + http://aloha50.net   - Supporting - FreeBSD  7.2 - 8.0 - 9* +
   email: n...@hdk5.net 
All that's really worth doing is what we do for others.- Lewis Carrol

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


[LUAU] IP address on Cable

2011-03-03 Thread Al Plant

Aloha,

Does anyone on the list have experience with a firewall on an Oceanic 
cable feed? Linux or Freebsd is what I use,.but I only have experience 
with firewalls on Telcom lines.


I am trying to help a guy with a Windows 7 box.  He has netflix on this 
cable too so it may have a fixed IP.


He gets attacked a lot with viruses and other weirdness even with Norton 
on the box.


Any suggestions appreciated.


~Al Plant - Honolulu, Hawaii -  Phone:  808-284-2740
  + http://hawaiidakine.com + http://freebsdinfo.org +
  + http://aloha50.net   - Supporting - FreeBSD  7.2 - 8.0 - 9* +
   email: n...@hdk5.net 
All that's really worth doing is what we do for others.- Lewis Carrol

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-03 Thread Jon Reynolds
Use the firewall that comes with windows and use a cheap router to nat  only  
those ports that need to be exposed. Use firefox with noscript and download  
a couple of malware cleaners and run them both to clean up the box. Update  
his norton and his system and any other app.


Hope that helps,

Jon 


-Original message-
From: Al Plant n...@hdk5.net
To: LUAU luau@lists.freesoftwarehawaii.org
Sent: Thu, Mar 3, 2011 22:39:14 GMT+00:00
Subject: [LUAU] IP address on Cable

Aloha,

Does anyone on the list have experience with a firewall on an Oceanic 
cable feed? Linux or Freebsd is what I use,.but I only have experience 
with firewalls on Telcom lines.


I am trying to help a guy with a Windows 7 box.  He has netflix on this 
cable too so it may have a fixed IP.


He gets attacked a lot with viruses and other weirdness even with Norton 
on the box.


Any suggestions appreciated.


~Al Plant - Honolulu, Hawaii -  Phone:  808-284-2740
  + http://hawaiidakine.com + http://freebsdinfo.org +
  + http://aloha50.net   - Supporting - FreeBSD  7.2 - 8.0 - 9* +
   email: n...@hdk5.net 
All that's really worth doing is what we do for others.- Lewis Carrol

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-03 Thread Peter Besenbruch
 I am trying to help a guy with a Windows 7 box.  He has netflix on this 
 cable too so it may have a fixed IP.

If not fixed, then the same for extended periods.

 He gets attacked a lot with viruses and other weirdness even with Norton 
 on the box.

I always am suspicious of anti-virus software. I don't think it works well. 

The main difference between cable and ADSL is that the cable folks share a
quasi-local network with a number of other households. If Windows networking
isn't blocked on Windows' firewall, or the router, in theory other people on
that network can browse the files on a user's machine. Likewise, malware with
that capability can have better luck spreading on cable.

 Any suggestions appreciated.

Install Linux. ;) Failing that, you need to check into the guy's browsing and
e-mail habits.

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-03 Thread Vince Hoang
On Mar 3, 2011, at 12:36 PM, Al Plant n...@hdk5.net wrote
 Does anyone on the list have experience with a firewall on an Oceanic cable 
 feed? Linux or Freebsd is what I use,.but I only have experience with 
 firewalls on Telcom lines.

IP is IP. It doesn't matter if your provider hands you cable, DSL, Ethernet or 
wireless; you protect it the same way.

 I am trying to help a guy with a Windows 7 box.  He has netflix on this cable 
 too so it may have a fixed IP.
 
 He gets attacked a lot with viruses and other weirdness even with Norton on 
 the box.
 
 Any suggestions appreciated.

If you have a gateway that does NAT, you are shielded from most of the network 
based attacks.

However, I see most malware through compromised sites and ads, via the web 
these days.

I'll second Jon's suggestion of FireFox/NoScript for tech savvy folks. For 
others, start with an ad blocker and Chrome if Win7/IE8 doesn't seem to be 
doing the trick.

My best suggestion is to have 1 PC that has no network access or is only used 
to visit financial sites and a 2nd PC for recreational use.

-Vince

___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org


Re: [LUAU] IP address on Cable

2011-03-03 Thread Jon

On 03/03/2011 09:34 PM, Vince Hoang wrote:

On Mar 3, 2011, at 12:36 PM, Al Plantn...@hdk5.net  wrote
   

Does anyone on the list have experience with a firewall on an Oceanic cable 
feed? Linux or Freebsd is what I use,.but I only have experience with firewalls 
on Telcom lines.
 

IP is IP. It doesn't matter if your provider hands you cable, DSL, Ethernet or 
wireless; you protect it the same way.

   

I am trying to help a guy with a Windows 7 box.  He has netflix on this cable 
too so it may have a fixed IP.

He gets attacked a lot with viruses and other weirdness even with Norton on the 
box.

Any suggestions appreciated.
 

If you have a gateway that does NAT, you are shielded from most of the network 
based attacks.

However, I see most malware through compromised sites and ads, via the web 
these days.

I'll second Jon's suggestion of FireFox/NoScript for tech savvy folks. For 
others, start with an ad blocker and Chrome if Win7/IE8 doesn't seem to be 
doing the trick.

My best suggestion is to have 1 PC that has no network access or is only used 
to visit financial sites and a 2nd PC for recreational use.

-Vince
   
Vince brings up a really good point about a 2nd PC for financial sites. 
Another option would be if the person cannot afford a 2nd PC then burn 
them a copy of Knoppix or some other live cd and teach them to use that 
when they do those types of transactions.


Really Al what this person needs is a good lesson on what is safe and 
what is not safe on the Internet. Clicking install on everything that 
pops up or allowing images to be loaded in email from third-party 
websites is asking for trouble. What is obvious to us is not obvious to 
the regular user, we deal with this on a daily basis because it is our 
job, we know the basics of safe Internetting. But we really are the 
exception, what we take as common sense is really not that common to the 
uninitiated. I believe in this users case knowledge will go a lot 
farther than software and hardware and it will save you a little piece 
of sanity. :)


Jon
___
LUAU@lists.freesoftwarehawaii.org mailing list
http://lists.freesoftwarehawaii.org/listinfo.cgi/luau-freesoftwarehawaii.org