fwd: _Hardening Windows 2000_ - free .pdf chapter 21

[repost]

follow up to C*o*d*e* R*e*d, etc.

 http://www.windows2000securityhandbook.com -
 http://www.systemexperts.com/win2k.html -
 http://www.systemexperts.com/win2k/HardenWin2K.html -

---excerpt---

   Hardening Windows 2000

   Abstract

   Determining what steps need to be taken to secure a    system is one of the most frustrating things that    system administrators have to do. This white paper    provides a method for getting a Win2K server to a    "secure" baseline. From this baseline you can work    forward to install additional services. The focus of this    white paper is on the Win2K server, but much of the    information is applicable to Win2K Professional as well.

   This paper is excerpted and modified from Chapter 21    of the Windows 2000 Security Handbook    (ISBN: 0-07-212433-4, copyright Osborne/McGraw-Hill)    authored by Phil Cox and Tom Sheldon

   I hope this proves helpful,

   Phil

   This following files are currently available:

   HardenW2K12.pdf: Hardening Windows 2000 version 1.2

[http://www.systemexperts.com/win2k/hardenW2K12.pdf]

   home_Low.ipsec: IPSec filters to block inbound    connections to NetBIOS/SMB ports (ews)

[http://www.systemexperts.com/win2k/home_Low.ipsec]

   home_User.inf: IPSec filters to set Local Security    Policy for a home user configuration (ews)

[http://www.systemexperts.com/win2k/home_User.inf]

   secureWebServer.ipsec: IPSec filters to only allow    inbound http by default. Additional filters defined for    https, smtp, NetBIOS, ICMP (ews)

[http://www.systemexperts.com/win2k/secureWebServer.ipsec]

   Web_Secure.inf: IPSec filters to set Local Security    Policy for a web server configuration. Note that this    Web Server template was partially created on a    Windows 2000 Professional System, so Power Users    (or related SID) may be present in rulesets, instead of    Server Operators. (ews)

[http://www.systemexperts.com/win2k/web_secure.inf]

   hardenWin2K.zip: Zip file of the directory contents

[http://www.systemexperts.com/win2k/hardenWin2K.zip]

   Note on Windows 2000 Templates and IPSec    filters Descriptions:
   Please test all templates on non-production servers. I    haven't had time to fully test all file and registry    changes on production systems. please send    comments and feedback to Eric Schultze or Phil Cox

   SystemExperts Corporation
   Boston | New York | Washington | San Francisco | Los Angeles | Sacramento | Tampa    Call 1-888-749-9800 info_at_systemexperts.com     ©Copyright SystemExpertsTMCorporation, 1995 - 2001. All rights reserved.    All trademarks used herein are the property of their respective owners.

--end---

--
Please see the official ORACLE-L FAQ: http://www.orafaq.com
--
Author: Eric D. Pierce
  INET: PierceED_at_csus.edu

Fat City Network Services    -- (858) 538-5051  FAX: (858) 538-5051
San Diego, California        -- Public Internet access / Mailing Lists
--------------------------------------------------------------------
To REMOVE yourself from this mailing list, send an E-Mail message
to: ListGuru_at_fatcity.com (note EXACT spelling of 'ListGuru') and in
the message BODY, include a line containing: UNSUB ORACLE-L
(or the name of mailing list you want to be removed from).  You may
also send the HELP command for other information (like subscribing).