Thoughts on Security?

[Accessdabbler]

The only way I can get MSN Messenger to work with Win98SE (the voice chat) is to shutdown the firewall (ZoneAlarm) and connect directly to the ADSL modem (bypassing the router).

In doing so, I can turn off File and Printer sharing but there are still some listening ports active (all related to NetBIOS I believe).

Can anyone recommend some free software firewalls that will only block certain ports and not use NAT?

 

[WheeDoggy]

I think that Kerio would do it for you.

Might want to block TCP/UDP 135,137-139 and 445.

If you do not use NetBios at all, (if memory serves correctly you use Win95/98????), delete/move/rename vnbt.386.
It will not harm your system (other than NetBios capability).

Rgds

 

[Accessdabbler]

I'll try Kerio. I can't mangle vnbt.386 since this computer is on a network and it is needed for file sharing but on a standalone system, renaming it might be worth trying.

 

[Grenage]

MSN messenger can (and does) work through NAT. A couple of users here run it through our rooted, and they both have zonealarm installed too.

 

[Accessdabbler]

You can chat and share files but voice does NOT work. I haven't been able to get it to work through ZoneAlarm (free edition). It will work for about a minute, then nothing.

It won't work through my broadband router either. I've tried every setting and still nothing.

It has to do with NAT and the UPnP (which I don't understand).

 

[Grenage]

Sorry my mistake, I didn't read the (voice chat) section, which we don't use.

 

[WheeDoggy]

Accessdabbler-

I just went to Kerio's site - don't know why but there is no link from the Kerio homepage to the Kerio Personal Firewall page.
(I assume you haven't tried it yet)
Anyway, here's the direct link.

http://www.kerio.com/us/kpf_screenshots.html

Rgds
<cfif IsStressed(objWheeDoggy)>
<!--- 10%/hour/each day --->
<cf_objWheeDoggy BloodPressure=&quot;340%&quot;>
</cfif>

 

[SgtB]

All you'd need to do, is find out what port the voice chat is trying to use, then open that port on the firewall. This feature does work though NAT.
You can always try Kerio personal firewall, as it has adequate controls for opening certain ports via rule base. ________________________________________
Check out

http://www.security-forums.com