republican-creole
Search:  

 
 
   All ForumsHot TopicsGallery






how-to block ads


 
Forums » Up and Running » Security » Security » Kerio Personal Firewall v2.1.5 & KB951748? Kerio forum?
Share Topic:
RSS topic:
toggle:
flat / full
normal / watch
Posting:
Post a:
Post a:
Security Software Updates - 17 July 2008 »
« IP Anonymizer For 3rd Party Apps.  
redrebel

join:2001-12-06
Oxnard, CA


1 edit

Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next.

antdude
A Ninja Ant
Premium,VIP
join:2001-03-25


1 edit

Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?

said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
On the laptop I said forget it and uninstalled the patch and will wait to figure out what happens next.
Hmm, DNS? I wonder if Explorer is calling out even though I use hosts and my old Netgear RT311 router (firmware from 2002 or so). I do use LAN file sharing with a Linux/Debian box (Samba). What's the rule called for this DNS resolution?
--
Ant @ »antfarm.ma.cx and »aqfl.net. Please do not IM/e-mail me for technical support. Use the forum! Disclaimer: The views expressed in this posting are mine, and do not necessarily reflect the views of my employer
Curiosity

join:2001-10-01
Dawson Creek, BC

said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop) and yes when I installed the dreaded KB951748 it knocked out IE and Firefox for me. Looking at my logs it was using highports for DNS resolution. I had it specifically set to only use the range of 1024-5000. Made the change to allow highports (1024-65535) and it works fine (desktop only).
Why is changing the local port range going to make DNS more secure? What is the idea behind that?

NetFixer
Freedom is NOT Free
Premium
join:2004-06-24
Murfreesboro, TN
·Vonage
·AT&T Southeast
·Cingular Wireless
·AT&T CallVantage

Re: Kerio Personall Firewall v2.1.5 & KB951748? Kerio forum?

said by Curiosity See Profile :

Why is changing the local port range going to make DNS more secure? What is the idea behind that?
Try doing a Google or Yahoo! search for DNS spoofing and you will find a lot of answers to your question. Here is a sample link from such a search, I hope some of the results you get will match your technical knowledge level, since I don't know exactly how high or low to shoot.

From SANS Internet Storm Center: Multiple Vendors DNS Spoofing Vulnerability
--
We can never have enough of nature.
We need to witness our own limits transgressed, and some life pasturing freely where we never wander.
Test your firewall.

lilhurricane
iPurple
Premium,Mod
join:2003-01-11
Purple Zone
clubs:
·Comcast

Host:
TV over IP
Software
RCN
Inside Insight
Team Discovery
said by redrebel See Profile :

I'm one of the minority that still uses KPF v2.1.5 (desktop and laptop)
You aren't the "only" one

This plus BlitzenZeus See Profile's ruleset work well for me..multiple browsers..

No issues as yet
--
~Safe Hex~ Team Discovery ~ Project Hope ~ Like A Hurricane~
Forums » Up and Running » Security » SecuritySecurity Software Updates - 17 July 2008 »
« IP Anonymizer For 3rd Party Apps.  


Monday, 30-Nov 09:01:56 Terms of Use | Privacy Policy | Hosting by www.nac.net - DSL,Hosting & Co-lo | feedback | contact
over 10 years online! © 1999-2009 dslreports.com.
page compression OFF
Most commented news this week
· [124] Time Warner Cable Fires Broadside At Broadcasters
· [112] New AT&T Ad Campaign Hits Back At Verizon
· [96] Apple Joins AT&T Verizon Snark Fest
· [87] New Bill Takes Aim At Higher Verizon ETFs
· [82] Weekend Open Thread
· [80] TiVo Sees Record Customer Losses
· [79] Verizon CEO: Hulu Will Be Dead Soon
· [69] In-Flight Internet Headed For Bumpy Landing?
· [63] Thanksgiving Open Thread
· [41] ICANN Slams DNS Redirection
Most people now reading
· Are GPS's better today? [General Questions]
· Whats the big deal about being "Old School"....? [World of Warcraft]
· [Newsgroups] Newzleech down? [Filesharing Software]
· Is Easynews down? [Filesharing Software]
· Windows 7 boot manager editing questions [Microsoft Help]
· Considering Leaving Vonage, who should I Consider? [VOIP Tech Chat]
· [How to] Install Asterisk on an Asus WL-520GU router [VOIP Tech Chat]
· Leveling to 85 [World of Warcraft]
· [ PVP] 3.2 DK PvP D/W Spec... [World of Warcraft]