Cable Forum - View Single Post

Raistlin · 13-02-2010, 18:06

Two firewalls are a good start, hopefully they're standalone appliances of different manufacture. As for the 'password', not sure what that achieves as (presumably) it is only asked for when you try to connect out.

Annoying it may be, but something you can control or do something about it certainly isn't.

You could have a look at your appliance's ruleset and see if it allows you the option to drop (rather than block) all traffic from a certain IP range. This would allow you to drop (ie. not perform any processing upon other than a determination of origin) any inbound connection attempts from any Chinese IP. This will lighten the load on your firewalls and will also make it far less likely that they're ever going to gain a foothold on you.

Remember though that if you're exposing any services to the outside as a result of the applications/hardware you're using then you need to make sure that the application/hardware is patched/updated to the latest secure release.

13-02-2010, 18:06	#4
Raistlin Inactive Join Date: Feb 2004 Location: There's no place like 127.0.0.1 Services: Depends on the person and the price they're offering Posts: 12,384	Re: Hacking by China on my computer. Two firewalls are a good start, hopefully they're standalone appliances of different manufacture. As for the 'password', not sure what that achieves as (presumably) it is only asked for when you try to connect out. Annoying it may be, but something you can control or do something about it certainly isn't. You could have a look at your appliance's ruleset and see if it allows you the option to drop (rather than block) all traffic from a certain IP range. This would allow you to drop (ie. not perform any processing upon other than a determination of origin) any inbound connection attempts from any Chinese IP. This will lighten the load on your firewalls and will also make it far less likely that they're ever going to gain a foothold on you. Remember though that if you're exposing any services to the outside as a result of the applications/hardware you're using then you need to make sure that the application/hardware is patched/updated to the latest secure release.