RE: Microsoft to ship new versions with firewall enabled

2003-08-18 Thread St. Clair, James
Hmm...I didn't even know XP had a built-in firewall. Any bets on how long it is before other companies with software firewall products bring suit against Microsoft for bundling a firewall in the OS? -- No clue, but I can tell you how long it will last before ISP helpdesks disable

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Eric A. Hall
on 8/14/2003 9:29 AM Sean Donelan wrote: John Markoff reports in the New York Times that Microsoft plans to change how it ships Windows XP due to the worm. In the future Microsoft will ship both business and consumer verisons of Windows XP with the included firewall enabled by default.

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Matthew Watkins
Apple have the right idea... I'd say all the vendors need to take a carefully balanced approach to security in the default configurations of their software. Leave services exposed to the network disabled by default, where possible. By all means, configure firewalls by default to block all

Re: [Microsoft to ship new versions with firewall enabled]

2003-08-14 Thread Daniel Senie
At 10:46 AM 8/14/2003, Joshua Sahala wrote: Sean Donelan [EMAIL PROTECTED] wrote: John Markoff reports in the New York Times that Microsoft plans to change how it ships Windows XP due to the worm. In the future Microsoft will ship both business and consumer verisons of Windows XP with the

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Adi Linden
However the new microsoft policy will help protect the network from Joe and Jane average who buy a PC from the closest big box store and hook it up to their cable modem so they can exchange pictures of the kids with the grandparents in Fla. This is the class of users who botnet builders

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread up
On Thu, 14 Aug 2003, Jack Bates wrote: John Neiberger wrote: Hmm...I didn't even know XP had a built-in firewall. Any bets on how long it is before other companies with software firewall products bring suit against Microsoft for bundling a firewall in the OS? -- No clue, but I can

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Greg Maxwell
On Thu, 14 Aug 2003, Eric A. Hall wrote: Wouldn't it make more sense to ship with all of the services disabled? I mean, if the role of the firewall is to block packets to weak services, wouldn't it be simpler to just disable the damn services since they aren't going to be usable anyway?

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Crist Clark
Richard Cox wrote: On Thu, 14 Aug 2003 16:07 UTC, Eric A. Hall [EMAIL PROTECTED] wrote: | Wouldn't it make more sense to ship with all of the services disabled? Yes it would - at least to US - but that would inevitably create a load for the Support desk. However as Microsoft charge for

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Scott McGrath
The checkpoint and Pix Boxen are what we use here. But we also use ipchains to secure things at a host level. Scott C. McGrath On Thu, 14 Aug 2003, Drew Weaver wrote: ipchains and similar firewalls are indeed far superior. I manage real firewalls as part of

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Iljitsch van Beijnum
On donderdag, aug 14, 2003, at 17:45 Europe/Amsterdam, Christopher L. Morrow wrote: No answer on that one, However Mac OS X also includes a built in firewall. yes, with fairly a simple method to add listening services to it... though it seems the 'listening service' might have to register

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Drew Weaver
John Neiberger wrote: Hmm...I didn't even know XP had a built-in firewall. Any bets on how long it is before other companies with software firewall products bring suit against Microsoft for bundling a firewall in the OS? -- No clue, but I can tell you how long it will last before

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Gerald
On Thu, 14 Aug 2003, Christopher L. Morrow wrote: On the configuration angle, the Microsoft ICF (Internet Connection Firewall) blocks everything by default. as does OSX. Just to clarify, the OSX firewall has a little bit of sense. If you check that you want to enable one of the services

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread McBurnett, Jim
From: Scott McGrath [mailto:[EMAIL PROTECTED] No answer on that one, However Mac OS X also includes a built in firewall. On the configuration angle, the Microsoft ICF (Internet Connection Firewall) blocks everything by default. I just worked on a friends computer last night. The XP ICF

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread John Neiberger
Sean Donelan [EMAIL PROTECTED] 8/14/03 8:29:07 AM John Markoff reports in the New York Times that Microsoft plans to change how it ships Windows XP due to the worm. In the future Microsoft will ship both business and consumer verisons of Windows XP with the included firewall enabled by

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Drew Weaver
ipchains and similar firewalls are indeed far superior. I manage real firewalls as part of my responsibilities. However the new microsoft policy will help protect the network from Joe and Jane average who buy a PC from the closest big box store and hook it up to their cable modem so they can

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Jack Bates
John Neiberger wrote: Hmm...I didn't even know XP had a built-in firewall. Any bets on how long it is before other companies with software firewall products bring suit against Microsoft for bundling a firewall in the OS? -- No clue, but I can tell you how long it will last before ISP helpdesks

Re: [Microsoft to ship new versions with firewall enabled]

2003-08-14 Thread Joshua Sahala
Sean Donelan [EMAIL PROTECTED] wrote: John Markoff reports in the New York Times that Microsoft plans to change how it ships Windows XP due to the worm. In the future Microsoft will ship both business and consumer verisons of Windows XP with the included firewall enabled by default.

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Daniel Senie
At 12:07 PM 8/14/2003, Eric A. Hall wrote: on 8/14/2003 9:29 AM Sean Donelan wrote: John Markoff reports in the New York Times that Microsoft plans to change how it ships Windows XP due to the worm. In the future Microsoft will ship both business and consumer verisons of Windows XP with the

RE: [Microsoft to ship new versions with firewall enabled]

2003-08-14 Thread Vachon, Scott
while i think many of us will welcome this, i am skeptical of what the firewall will be 'enabled' to block, and how easy it will be for the user to set-up rules (and hopefully there will be a sanity check included so that 'permit in any' is not a valid option, but then 'permit out any'

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Edward Lewis
[Veering further off-topic] Hmm...I didn't even know XP had a built-in firewall. Any bets on how long it is before other companies with software firewall products bring suit against Microsoft for bundling a firewall in the OS? Along the vein of I dislike Microsoft, but let's get over it - when

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Scott McGrath
No answer on that one, However Mac OS X also includes a built in firewall. On the configuration angle, the Microsoft ICF (Internet Connection Firewall) blocks everything by default. Scott C. McGrath On Thu, 14 Aug 2003, John Neiberger wrote: Sean Donelan [EMAIL

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread JC Dill
At 10:00 AM 8/14/2003, Daniel Senie wrote: At 12:39 PM 8/14/2003, Matthew Watkins wrote: Apple have the right idea... I'd say all the vendors need to take a carefully balanced approach to security in the default configurations of their software. Leave services exposed to the network disabled by

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Omachonu Ogali
On Thu, Aug 14, 2003 at 05:37:44PM +0100, Richard Cox wrote: What I do like in the latest release of Zone Alarm Pro is that it will stop ANY program from connecting outbound on Port 25 unless that program has been specifically authorised to send mail. It was quite informative to see which

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Steven M. Bellovin
In message [EMAIL PROTECTED], McBu rnett, Jim writes: From: Scott McGrath [mailto:[EMAIL PROTECTED] No answer on that one, However Mac OS X also includes a built in firewall. On the configuration angle, the Microsoft ICF (Internet Connection Firewall) blocks everything by default. I just

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Henry Linneweh
It comes standard with a firewall built in, which is not user friendly and you have to still purchase a firewall that allows user access to control what gets blocked and what does not, most intelligent people turn it off. -HenryEdward Lewis [EMAIL PROTECTED] wrote: [Veering further

RE: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Daniel Senie
At 12:39 PM 8/14/2003, Matthew Watkins wrote: Apple have the right idea... I'd say all the vendors need to take a carefully balanced approach to security in the default configurations of their software. Leave services exposed to the network disabled by default, where possible. By all means,

Re: [Microsoft to ship new versions with firewall enabled]

2003-08-14 Thread John Kinsella
On Thu, Aug 14, 2003 at 10:46:56AM -0400, Joshua Sahala wrote: while i think many of us will welcome this, i am skeptical of what the firewall will be 'enabled' to block, and how easy it will be for the user to set-up rules (and hopefully there will be a sanity check included so that 'permit

Re: Microsoft to ship new versions with firewall enabled

2003-08-14 Thread Christopher L. Morrow
On Thu, 14 Aug 2003, Iljitsch van Beijnum wrote: On donderdag, aug 14, 2003, at 17:45 Europe/Amsterdam, Christopher L. Morrow wrote: No answer on that one, However Mac OS X also includes a built in firewall. yes, with fairly a simple method to add listening services to it... though