Home | Contact Us | FAQ | Search & Site Map | Link to Us
Sign In | Join | Other 45 Sites in Network
Home
Discussion GroupsWindows VistaWindows XPWindows MeWindows 98Windows 95Virtual PCInternet ExplorerOutlook ExpressWindows MediaSecurity
Related Topics
MS Server ProductsMS OfficePC HardwareMore Topics ...

Windows Forum / Windows 98 / General Topics / January 2007

Tip: Looking for answers? Try searching our database.

Firewall bypass?

Thread view: 
Enable EMail Alerts  Start New Thread
Thread rating: 
Andy - 30 Jan 2007 09:57 GMT
How can I stop other users setting our PCs (98SE) to bypass the firewall by
changing IE to automatically detect setting and unticking use proxy server?

Signature

Andy

MEB - 30 Jan 2007 10:35 GMT
| How can I stop other users setting our PCs (98SE) to bypass the firewall by
| changing IE to automatically detect setting and unticking use proxy server?

Policy Editor [poledit] or direct registry modifications limiting the
access for each individual machine.
Or are you trying to completely block access altogether?

Signature

MEB
http://peoplescounsel.orgfree.com/
BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real
world"

"Most people, sometime in their lives, stumble across truth.
Most jump up, brush themselves off, and hurry on about their business as if
nothing had happen."  Winston Churchill
Or to put it another way:
Morpheus can offer you the two pills;
but only you can choose whether you take the red pill or the blue one.
_______________

Andy - 30 Jan 2007 11:50 GMT
> | How can I stop other users setting our PCs (98SE) to bypass the firewall
> by
[quoted text clipped - 4 lines]
> access for each individual machine.
> Or are you trying to completely block access altogether?

The plan is not to block access altogether but to prevent bypassing of the
firewall.

Andy
98 Guy - 30 Jan 2007 14:26 GMT
> The plan is not to block access altogether but to prevent
> bypassing of the firewall.

Do you have a NAT-router between your network and the internet?

What exactly is being by-passed?  How is your network connected to the
internet?

What is the gateway set to on the network adapter TCP/IP setting?
Andy - 30 Jan 2007 14:52 GMT
> | How can I stop other users setting our PCs (98SE) to bypass the firewall
> by
[quoted text clipped - 4 lines]
> access for each individual machine.
> Or are you trying to completely block access altogether?

Had a look at that, seems to do the job, THANKS.

Andy
MEB - 30 Jan 2007 18:38 GMT
| > | How can I stop other users setting our PCs (98SE) to bypass the firewall
| > by
[quoted text clipped - 8 lines]
|
| Andy

YW.
Contrary to popular misconceptions, this Policy Editor, was Win98's answer
to security and user rights issues later touted in XP.
Where in Win98, the basic user was granted all rights [no security
administration unless policies were applied]; whereas in XP, users are
assigned policy restrictions upon creating the user account using
pre-made/included security policies. Same thing, only a different way to
setup, which made XP users think their system was SOOOO much more secure.
Nah, just made for easy installation by the uninformed and IT.

Policy Editor should be used with caution; be careful how restrictive you
get. And make sure you leave a way in for your self; make sure you create a
Master/Administrator policy as well.
Note: you'll have to block access in Control Panel to:
Networking;
Internet Options;
USERS/Passwords;
and related.

You'll also block the setup TABs in IE itself;
remove and/or restrict the html lnk ability to IE;
disallow registry editing and command prompt activity;
disable user access in and to the BIOS without a password [create an
administrators password in the BIOS/CMOS];
disable F8 and other bypass access at boot time [such as by REQUIRING
passwords and user accounts used];
installation of programs by the common user;
and other like restrictions.

Also, your firewall can be instrumental in blocking/restricting access by
IE/OE or any other browser or email client, and other NET access. As well as
the Hosts and/or LMHosts files.

It sounds overly complex, but there are or were some very helpful web pages
and manuals/docs for this activity, which made the task somewhat easier. And
once created, then you'd be running the same tried and true setups/user
policies once used in the business/commercial world, created by IT and the
roll-out departments [check for the "white papers"] with NT, prior to XP and
the specialty servers...
If fact, you'll likely find some pre-made policies for your desired
restrictions somewhere out on the NET [big hint].

Or, you can create a .reg file to handle much of this activity, but it will
not give the full benefit of policies.

Good luck. Google, Microsoft Knowledge Base, and Microsoft TechNet, are
your friends for this activity.

Signature

MEB
http://peoplescounsel.orgfree.com/
BLOG - http://peoplescounsel.spaces.live.com/ Public Notice or the "real
world"

"Most people, sometime in their lives, stumble across truth.
Most jump up, brush themselves off, and hurry on about their business as if
nothing had happen."  Winston Churchill
Or to put it another way:
Morpheus can offer you the two pills;
but only you can choose whether you take the red pill or the blue one.
_______________

 
Sign In
Join
My Latest Posts
My Monitored Threads
My Blog
My Photo Gallery
My Profile
My Homepage

Start New Thread
Enable EMail Alerts
Rate this Thread



©2008 Advenet LLC   Privacy Policy - Terms of Use
This website includes both content owned or controlled by Advenet as well as content owned or controlled by third parties.