Apache 2 & Zone Alarm

[brisray]

I've recently set up Apache 2 on a Windows 2000 Pro machine. Despite the fact I don't really know what I'm doing everything seems to be running properly - or almost.

The last couple of days the web machine keeps getting attacked by msmsgri32.exe I've tried running Zone Alarm -free version 3.7, but when I do this I can no longer see my web site.

1) Can I use Zone Alarm to protect the machine when running Apache 2?

2) If not, what can I do to protect the machine?

3) What are the basic steps that I should be taking in either Windows 2000 or Apache to protect the machine? I've already renamed the admin account.

I'm reading my way through the Windows 2000 security guides from

http://www.nsa.gov/snac/

so hopefully will have some ideas of my own, but getting throug hthe technical gobbledegook is hard going.

Ray

 

[brisray]

Oh well, I've just had to reinstall the OS as without Zone Alarm running I seem to be getting too many virus's. Over the last few days my anti virus has found Valla.2048, Trojan.Dropper, Muma and Msmsgri32.exe on the machine.

The only solution I've found is to go back to Apache 1.3.28

Ray

 

[Newposter]

Are you using a router? That blocks a lot of this stuff. Also, other firewall software in conjunction with a router works well.

Newposter
"Good judgment comes from experience. Experience comes from bad judgment."

 

[brisray]

Nope, just a Netgear EN104 hub. Doesn't matter now though as I ended up having to reinstall the OS on two of the machines at home because of the infection.

Running Apache 1.3 and the firewall seems ok at the moment.

Ray

 

[brisray]

I think I've finally figured it out how to use Zone Alarm with Apache. In Zone Alarm the Firewall > Main tab the Internet Zone security should be set to Medium not high.

Ray