Free Republic
Browse · Search
General/Chat
Topics · Post Article

To: texas booster
> Can you please distill into instructions suitable for sales reps like me (if you can even dumb it down that far)?

I can give you a general description, but the details necessary for useful "instructions" are going to be different for each situation, and this comment would be many pages long and anybody's eyes would glaze over, not just a sales rep's. :) But there's some hope... read on please...

The basic concept is that between your computer and the internet, there are a couple of devices, or software functions, which can selectively block connections between your computer and the internet. You can control what data is permitted to go in each direction, and that control function is called a "firewall".

1. A software firewall is present on your computer (you can find "Windows Firewall" in the ControlPanel), and it should be turned ON.

2. There's usually a firewall function in your Wireless (WiFi) modem/router in your home or small office.

3. And most corporate offices with networking have a fancy hardware firewall in their server room.

In each of those three situations, the firewall mainly blocks inbound connections (from the internet) and is very open about outbound connections (to the internet).

But for this vulnerability, you need to block some outbound connections.

Connections are made on "ports" that are numbered from 1 to 65535. The ports numbered 139 and 445 carry SMB information that lets you connect to network shared drives, like shared folders on your company server. When that connection is made, private information like your network password is transferred; this is normal.

The problem with this vulnerability is that it can allow a hacker on the internet to get that private information, if those ports are open to the internet.

So the ports 139 and 445 should be blocked at your Wireless modem/router or corporate firewall. The detailed instructions on how to do that are specific to each make and model of router and corporate firewall.

You generally do NOT want to block the ports on your computer's firewall because if you do, you won't be able to connect to network shared drives and folders.

The communications "protocol" that makes the connection is called "TCP"; there are a few different protocols used in these connections, and you want to block TCP on those ports.

If you know the specific make and model of the firewall device you need to work with, I can perhaps find instructions on the internet and help decode them for you.

21 posted on 04/20/2015 7:23:12 PM PDT by dayglored (Listen, strange women lying in ponds distributing swords is...sounding pretty good about now.)
[ Post Reply | Private Reply | To 17 | View Replies ]


To: dayglored
Thank you.

So if I need to open my VPN on my laptop to connect to corp, I need to keep the router ports open, but I could shut down all software based firewalls active on my other systems.

Am I close?

24 posted on 04/20/2015 10:20:45 PM PDT by texas booster (Join FreeRepublic's Folding@Home team (Team # 36120) Cure Alzheimer's!)
[ Post Reply | Private Reply | To 21 | View Replies ]

Free Republic
Browse · Search
General/Chat
Topics · Post Article


FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson