Oct 11 2011

Firewall Internet Security – The Basics of a Firewall

Firewalls

Enterprise companies today employ firewalls that do stateful inspection of sessions between external and internal hosts and devices. Cisco employs a patented ASA algorithm that utilizes source IP address, destination IP address, TCP sequence numbers, port numbers and TCP flags to examine and prevent unauthorized sessions. The firewall is configured with conduit statements to filter traffic by examining source/destination IP addresses, application port and protocol port before making a decision whether to permit or deny a session or specific traffic.

Firewalls are implemented at the company demilitarized zone (DMZ) which is located between the external network and the company internal network. Static routing is typically configured at the DMZ between firewalls and internal/external routers for improved security. This is to have greater control over route propagation than would be available with dynamic routing protocols such as RIP and EIGRP. Internal and DMZ (Public) servers would be configured to use the firewall as their default route to forward Internet traffic. If an internal router were available, servers would use that as their default gateway to forward Internet traffic.

The external router broadcasts a default route to the firewall that is used to forward traffic destined for the Internet. A conduit must be configured at the firewall for each protocol type that should be allowed through your firewall. For instance, if your company manages routers and servers across a firewall, you must configure a conduit for SNMP traffic to allow traps through the firewall. The conduit would specify the source address of the router which is sending SNMP traps, the destination address of the network management station that is receiving SNMP traps, and UDP 161 which is the UDP port number for sending SNMP traffic from managed devices to a network management station.

]]>

The firewall examines the end to end session connection and does a lookup of its conduit table to determine if a particular source address, destination address, protocol port or application port is allowed through. The packet is discarded or allowed through on to the company network (inside) or Internet depending upon the conduit statements configured.

TACACS Server

This is a TCP service running on a designated Unix server that authenticates employees attempting to access a router. The routers must be configured to send a request to the TACACS server when someone attempts to logon to a router. The router prompts the user for a username/password pair and sends that to the TACACS server for authentication. TACACS servers are implemented with VPN services as well to authenticate remote users before allowing that session to continue with network authentication to Windows Server, Unix or Mainframe authentication and authorization.

RADIUS Server

This is a UDP service running on a designated network server that authenticates employees attempting to access a router. The routers must be configured to send a request to the RADIUS server when someone attempts to logon to a router. The router prompts the user for a username/password pair and sends that to the RADIUS server for authentication. RADIUS servers are implemented with VPN services as well to authenticate remote users before allowing that session to continue with network authentication to Windows Server, Unix or Mainframe authentication and authorization.

Shaun Hummel is author of Network Planning and Design Guide available at amazon.com and CiscoDesignBooks.com featuring Networking Books, eBooks, Certifications, Articles and Design Tools.

Shaun Hummel, CCNP, is a Senior Network Engineer with 11 years experience in enterprise network planning, design, and implementation. He has worked for various private and public companies in Canada and the United States improving infrastructure, security, and management. He has written Network Planning and Design Guide, Cisco Wireless Network Design Guide and Network Assessment Guide. http://www.ciscodesignbooks.com
Article Source


Oct 11 2011

Firewall Bypass Software

If you are using the Windows XP firewall then you do not have adequate protection especially since it provides no outbound protection. The situation with Windows Vista is not much better as there seems to be agreement that the built in Windows Vista Firewall fails to provide any significant outbound security. This is a real surprise since it has been long accepted that the XP Firewall was quite worthless for the same reason and they now have had years to improve this feature. This may be resolved at some point in the future but in the meantime you need a firewall that can protect you from both inbound and outbound vulnerabilities. Consider trying one of the following three free firewalls.

Even though it may be annoying a lot of time working offline, and always work on your computer will open.Spy software is available in various online you can download them.

Next we will see a simple Internet Access scenario which will help us understand the basic steps needed to setup an ASA 5510. Assume that we are assigned a static public IP address 100.100.100.1 from our ISP. Also, the internal LAN network belongs to subnet 192.168.10.0/24. Interface Ethernet0/0 will be connected on the outside (towards the ISP), and Ethernet0/1 will be connected to the Inside LAN switch.

Your computer may slow down unwanted CPU activity, disk use and trafficking occur not do that.Your computer may become unstable and may be an accident.

For a more technical definition, a firewall is a software or hardware, designed to filter online information from the web to your computer. When you go to a website you send in information from your computer to the Internet. This information is considered as special commands. Each special command (data) is sent through packets. The packets sent need to abide online rules that are virtually set. If a packet fails to abide it, it will be discarded inside the network, meaning, it will not reach it’s destination. Firewall is designed to work that way. It will not let unauthorized packets to get in through such network passage without complying on the protocol.

]]>

It crosses the ad-funded websites, where advertising revenues paid by the legitimate site.Spyware is a matter of time.

If for example our inside interface connects to internal network 192.168.1.0/24, this means that packets arriving at the inside firewall interface must have a source address in the range 192.168.1.0/24 otherwise they will be dropped (if IP Spoofing is configured).

When research is different from the lists of the website.So in a sense, this is just a list, and they are different.But the list is informative and does not allow users the ability to see what some other users have decided.As a result, there are many places that are positive comments and negative feedback placed on land as well.

Many other security programs that could be used eventually.These were just some of the ten anti-virus tools that were listed in the website.Make sure to read all information provided on site to determine if the site can be a legitimate check, because otherwise we should be careful when downloading any software from the Internet on your computer.There is a risk if you arent sure that program.

Firewalls can also be based on certain rules or filters block the movement of inappropriate incoming and outgoing data. It can benefit the choice of Internet Protocol (IP) for example, and to prevent existing staff in the network access to the protocol specific addresses on the Internet or receiving emails from them. Firewalls can also block the movement of data in the network based on a unique identifier named ” the title of control to access to the” (MAC). Many of firewalls can control in data by using filters of key words or scope, and permit data which is destined for a particular location. Firewalls also allow the creation of more sophisticated to make more complex rules for the data.

How many computers do you use? Do all computers have malware protection? Did you know that sometimes it is necessary to install and use more than one product? Arm Yourself: Make sure you have your internet security software installed on your computer.Purchase of security software on your computer, but it is also a very good free antivirus and removal of malicious programs is available on the Internet.Temptation: Do not fall in pop-up ads promising free cash or products! Do not click on any pop-up ad that says your computer is infected.Do not click on links in e-mail.

CiscoASA5500(config)# ip verify reverse-path interface “interface_name” For example, to enable IP spoofing on the inside interface, use the following command: CiscoASA5500(config)# ip verify reverse-path interface inside

So be careful that the 3 point in the web hosting search are listed below.Characteristics necessary technical requirements for web site hosting is the most important point that must be taken into account, which includes: ) server platform and hardware requirements Do you think it is necessary, for example, if you want to create a website that uses programming environments such as Active Server Pages (ASP), Visual Basic scripts, Cold Fusion or Microsoft Access and SQL database, you need web hosting service to support the Windows platform, such as Windows NT or Windows 2000 servers.Similarly, programming languages such as Perl, CGI, SSI, PHP, and MySQL database, all web hosting that support Unix / Linux platform may be useful.
Listed top Firewall BypassFirewall appliance comparison 2010
Article Source


Oct 7 2011

How to Remove Firewall Software In the Best Way

Firewall Software Information

The Firewall Software virus is the latest badware. As typical fake anti-spyware software, first, it would imitate a system scan and claim that your PC is infected with malicious software, and then it would make harmless files on your computer and detect them as spyware. Finally it would tick you to get the paid version of this software and claim that it can remove these infections and secure your PC. Furthermore, Firewall Software displays fake security warnings and pop-ups claiming that your sensitive information can be stolen or that your PC is under attack from a remote computer. Do not trust or download this fake program, and once it appears in your computer, you should remove Firewall Software from your computer as soon as possible. 

]]>

How can you know if Firewall Software infects your computer?

When you’re infected with Firewall Software, Have you noticed?

Your computer run slower and slower.
Your homepage has been redirected to another site for your Internet settings have been changed by this fake program.
New desktop shortcuts have been added to your PC automatically.
Annoying popups
How to Remove Firewall Software Manually?

 If you want to remove Protection Center manually, please follow the instructions below. Noted to back up your registry and system, and set a restore point before this removal in case of a mistake.

1. Stop Protection Center Processes through Task Manager

2. Remove all the files associated with Protection Center

3. Search all the files associated with Protection Center files with Resource Manager and delete them.

4. Remove the registry entries generated by Protection Center.

What’s the problem when removing Firewall Software Manually?

Since Firewall Software can dig deep into your computer and makes it irremovable, mess with your registry setting and probably do other stuff that we don’t even know about. Removing Firewall Software Manually may be a little tricky. If any mistakes are made during the process such a manual activity can permanently damage your system. 

Remove Firewall Software automatically?

There is a fantastic removal tool that can help you 100% remove Firewall Software and all other rogue applications completely with great success and make sure all the associated threats are eliminated automatically with a few clicks

Spyware Remover is a fantastic removal tool that can help you 100% remove Svchost exe and all other rogue applications completely with great success and make sure all the associated threats are eliminated automatically with a few clicks http://www.bestspywarescanner.net/
Article Source


Oct 7 2011

The Great Firewall of China: Corporate Codes of Conduct as a Viable Means to Lift the INformation Curtain

Earlier this year, U.S. Secretary of State Hillary Clinton traveled to China, sternly condemned strict Internet censorship in China, and pledged to help Chinese citizens tear down the “Great Firewall of China.”  The remarks of Secretary Clinton that “we stand for a single Internet where all of humanity has equal access to knowledge and ideas” echoed the stern tone of Ronald Reagan twenty years ago when he challenged Soviet leader Mikhail Gorbachev: “Mr. Gorbachev, tear down this wall!”

Fast forward to 2010 where digital walls have replaced Soviet-era “bricks and mortar” to divide repressed citizens of authoritarian regimes from the world’s free-flowing current of information and ideas. Since Secretary Clinton’s visit to China, the State Department has brought the issue of online freedom to the forefront in its diplomacy around the world and joined with Internet providers and social media companies to forge a public-private partnership in Internet freedom. Such collaboration is key, since authoritarian regimes so often contract out the daily work of censorship to private companies.  But it may not be enough. Alternative solutions in U.S. domestic laws and international trade law have fallen short of posing a viable challenge to digital censorship in China. In the final analysis, voluntary corporate codes of conduct may be the only viable force to bring down the Great Firewall of China.

What is the Great Firewall of China?

Over sixty laws and administrative regulations have been enacted by the Chinese government to censor and limit access to the Internet.[i] These laws and regulations are implemented and enforced under an elaborate and sophisticated system known as the “Great Firewall of China.”

The “Great Firewall of China” is a complex matrix of filters, censors and barriers that regulate the flow of online information within the People’s Republic of China. The matrix, officially known as the “Golden Shield Project,” is comprised of both technological and human elements that work together to create a distorted version of the Internet—one without all the information the government does not want its citizens to see.

Four key elements make up the Great Firewall of China:

IP Blocking – the government can block a unique computer address if it hosts prohibited content.

Keyword Filtering – the government monitors all international Internet gateways and blocks specific pages based on keywords and content which is matched against a “blacklist.”

Self Censorship – the government requires all Internet companies operating within China to self-censor their content or face harsh penalties and possible shutdown if they fail to do so.

Enforcement - it is estimated that approximately 30,000 Chinese “Internet police” are monitoring Internet traffic and blocking prohibited content.

This elaborate system can block whole sites, individual pages and even up-to-the-minute search results that constantly change in response to unfolding global news and events.

While the Chinese government identifies broad categories of prohibited content, the rules are far from clear, leaving a great deal of ambiguity about what is off-limits. Without any guidance or official statement about why something may have been blocked, companies operating within China often err on the side of caution and diligently delete anything that may bring them into disfavor with the government. This is one of the reasons why Google exited the country earlier this year. Given the oppressive unpredictability and gross inequities of China’s Internet censorship regime, many attempts have been made to limit its effect both in the U.S. and internationally.

Legal Challenges to Great Firewall of China

The United States

Difficulties arise when U.S. Internet companies venture into foreign markets to reach out to millions of additional Internet users. In the case of China, companies that want to provide Internet services in the country must become subject to the laws and regulations of the Chinese authorities. Because most of these regulations are contrary to the liberal approach of Internet regulation found in Western states, U.S. companies are caught in a vice-grip between the demands of the Chinese government and the marked displeasure of the U.S. government and human rights organizations. The most popular examples of companies caught in this grip are U.S. software giants Google, Microsoft, Yahoo, and hardware maker Cisco Systems. Microsoft and Yahoo both censor the results of their Chinese-language search engines to varying degrees by removing politically sensitive content from the search results. Google left China earlier this year but recently renewed its license with the Chinese government.  The search giant, however, did not make any concessions regarding censorship—for now. For its part, Cisco Systems has been accused of supplying the Chinese government with some of the hardware used to build the Great Firewall.

The tension between China’s strict Internet censorship regime and the United States’ decidedly hands-off approach to the Internet, prompted the U.S. Congress to consider passing a statute to promote freedom of expression on the Internet: the Global Online Freedom Act.[ii] The primary purpose of the bill is to establish an Office of Global Internet Freedom empowered to draft a list of “Internet-restricting countries.” The bill aims “[t]o prevent United States businesses from cooperating with repressive governments in transforming the Internet into a tool of censorship and surveillance, to fulfill the responsibility of the United States Government to promote freedom of expression on the Internet, to restore public confidence in the integrity of United States businesses, and for other purposes.” [iii].

]]>

Section 201 of the Act states that a “United States business that creates, provides, or hosts any Internet search engine or maintains an Internet content hosting service may not locate, within a designated Internet-restricting country, [any materials] involved in providing such search engine or content hosting service.” Under the Act, Internet companies are also prohibited from altering their search engines to produce different search engine results for users accessing the search engine from different countries. [iv] Although the bill is unlikely to be enacted for a host of reasons, it nonetheless points to a promising U.S. trend to look for innovative legal solutions to put an end to digital censorship in China.

Another legal innovation recently employed in the U.S. to chisel away at the Great Firewall of China is the Alien Tort Claims Act (ATCA). The ATCA provides a private cause of action for aliens for torts committed in violation of the law of nations or a treaty of the U.S.[v] In April 2007, the U.S.-based NGO “World Organization for Human Rights” filed a major lawsuit in a U.S. district court against Yahoo! based on the Alien Tort Claims Act, accusing the Internet corporation of aiding and abetting the Chinese authorities to arrest and torture a Chinese journalist.[vi]

According to the Complaint, Yahoo! revealed, at the request of the Chinese authorities, the name of the journalist who was using a Yahoo! Internet account to disseminate his calls for democracy in China. Use of the ATCA could add some pressure on Internet service providers to show more respect toward basic human rights and democratic standards of free speech. However, given the Supreme Court’s recent trend toward narrowing the applicability of the ATCA,[vii] it remains to be seen whether new claims brought under the Alien Tort Claims Act will exert any meaningful pressure of China to reconsider its current regime of Internet censorship. While the U.S. continues to develop alternative ways to address Internet regulation in China, some compelling arguments are being made at the international level.

International Trade Law

Many in the international community have argued that China’s firewall system is a barrier to entry and violates international trade law. The thrust of this argument is that the Chinese government is using the “Great Firewall” as an instrument of online protectionism, by systematically excluding foreign providers in favor of domestic services.  This is why, for example, Google’s search engine is being squeezed out by Baidu, Facebook by Ren Ren Wang, and Youtube by Tudou and Youku.

Although there may be some challenges related to audio-visual media content under the General Agreement on Trade and Tariffs (GATT), the more logical approach relevant to search engines and social networking services would be to challenge the practice under the General Agreement on Trade in Services (GATS).  However, given the crucial structural difference between GATT and the GATS, the arguments are far from straight-forward.[viii] One of the most difficult challenges to overcome to the filtering of online content by the Chinese government is the General Exceptions clause in Article XIV of the GATS.  Unless the contested measure constitutes a means of unjustifiable discrimination, the GATS could not be invoked to prevent the adoption of laws that are “necessary to protect public morals or to maintain public order.”  It is possible, however, that a challenge to the measure could prevail under the WTO framework if it is shown that there exists a reasonably available alternative that is less restrictive.

While there are valid points to challenging the Great Firewall of China in the WTO context, the incendiary political fall-out from bringing such a claim would undoubtedly fuel a trade war unprecedented in scale. Given the political volatility of such an approach, other less-confrontational solutions must be considered. Corporate codes of conduct present such an alternative.

Corporate Codes of Conduct a Viable Means to Challenge Digital Censorship in China

Corporate codes of conduct played a major role in the collapse of apartheid in South Africa and are a viable means to end digital censorship in China. [ix] Secretary Clinton’s remarks concerning the “information curtain” dividing the world, echoes the injustices of the apartheid era where much greater injustice and unspeakable acts against humanity were challenged and ultimately overcome through the use of corporate codes of conduct.

These corporate codes of conduct, which came to be known as the Sullivan Principles, were pioneered by the African-American minister Rev. Leon Sullivan, a zealous promoter of corporate social responsibility.[x]

In 1977, Rev. Sullivan was a member of the board of General Motors. At the time, General Motors was one of the largest corporations in the United States. General Motors also happened to be the largest employer of blacks in South Africa, a country that was pursuing a harsh program of state-sanctioned racial segregation and discrimination targeted primarily at the country’s indigenous black population

 

Corporate Codes of Conduct Originally Developed to Challenge Apartheid

Rev. Sullivan developed the codes to apply economic pressure on South Africa in protest of its system of apartheid. Before the end of South Africa’s apartheid era, the principles were formally adopted by more than 125 U.S. corporations with operations in South Africa.[xi] Of those companies that formally adopted the principles,manycompletely withdrewtheir existing operations from South Africa.[xii] The principles eventually were widely adopted by United States-based corporations and played a significant role in the collapse of the South African regime. In reflecting on the success of his anti-Apartheid efforts, Rev. Sullivan recalled:

Starting with the work place, I tightened the screws step by step and raised the bar step by step. Eventually I got to the point where I said that companies must practice corporate civil disobedience against the laws and I threatened South Africa and said in two years Mandela must be freed, apartheid must end, and blacks must vote or else I’ll bring every American company I can out of South Africa.[xiii]

Given the success of the Sullivan principles in ending apartheid, we should look at applying the same principles to lift the information curtain in China.

Why Multinationals Should Adopt Corporate Codes of Conduct

Google, to its credit, has pioneered the corporate code movement. Google’s defiance of China’s censorship mandate illustrates the power of corporate social responsibility initiatives to influence and reshape the repressive policies of authoritarian regimes.

While most major multinational companies consider a presence in China critical to their future success, Google has demonstrated that even the largest of corporations are willing to forgo short term gain in the interest of an ultimate triumph over censorship—similar to how corporations sacrificed profits to challenge apartheid in the 1970s and 1980s.  In Google’s case, this will come at a cost of an estimated $300 million a year in revenue.[xiv] Although it will hardly make a dent in Google’s coffers, it is a step in the right direction.

Conclusion

Corporations adopting codes of conduct must be unified and patient in their approach. The challenge now will be to put these ideas into practice by incorporating them into diplomacy and trade policy. Doing so will apply meaningful pressure on companies to act responsibly through the adoption of corporate codes of conduct with respect to their China operations.  Pressing China to open the Internet to its people and allow for freedom of expression will not happen overnight. Indeed, the Chinese experience with the Internet is still in the early phases of development. Just as the Great Wall of China became an ancient relic of times gone by, the Great Firewall of China may one day become one, too.

 

[i] These laws are not applicable in Hong Kong and Macau, which are designated as special administrative regions not subject to most of the laws of the People’s Republic of China, including limits placed on the free-flow of information.  H. K. Basic Law, ch. II, arts. 8, 9.

[ii] Global Online Freedom Act, H.R. 2271, 111th Cong. (2009-2010). This bill is in the first stage of the legislative process. It has been referred to the House Foreign Affairs Subcommittee and the House Energy and Commerce Subcommittee.

[iii] HR 2271 Preamble

[iv] Section 203, H.R. 2271.

[v] 28 U.S.C. § 1350 (2006). The ATCA reads: “The district courts shall have original jurisdiction of any civil action by an alien for a tort only, committed in violation of the law of nations or a treaty of the United States.”

[vi] Wang Xiaoning v. Yahoo! Inc., No. C07-02151 C(N.D. Cal. Apr.18, 2007). Under international pressure, Yahoo! settled the lawsuit. In a written statement, Yahoo said it will provide “financial, humanitarian and legal support to these families” and create a separate “humanitarian relief fund” for other dissidents and their families. Yahoo Settles With Chinese Families, Wash. Post, Nov. 14, 2007.

[vii] See Sosa v. Alvarez-Machain et al. 542 U.S. 692 (2004). In Sosa, the U.S. Supreme Court cautioned against liberal expansion of the ATCA beyond the original scope of offenses contemplated when it was passed in 1789:  “[W]e are persuaded that federal courts should not recognize private claims under federal common law for violations of any international law norm with less definite content and acceptance among civilized nations than the historical paradigms familiar when section 1350 was enacted.” Id. at 732-33.  Within this historical context, the Court struck a balance and set forth a standard which recognized the evolving nature of international law and provided a modern framework for determining whether a tort constitutes a cause of action. The framework incorporates four features that approximate the considerations used in 1789 to establish a private right of action: universality, obligatory nature, specificity and prudential considerations.

 

[viii] The primary structural difference between the GATT and GATS is that the GAT applies to all categories of goods except those a Member specifically excludes, whereas under the GATS, they are obligated only to the sector-specific commitments they choose to assume. For example, a Member may accept GATS obligations in relation to cross-border supply of data processing services but make no similar commitments in relation to financial services.

[ix] Corporate codes of conduct have also been proposed to address international environmental concerns. See, e.g,. Santiago A. Cueto, Oil’s Not Well in Latin America, Curing the Shortcomings of the International Environmental Law Regime in Addressing Industrial Oil Pollution Through Corporate Codes of Conduct, 11 Fla. J. Int’L Law 535 (1997).

[x] Richard L. Herz,  21 Harvard Human Rights Journal  207, 224 THE LIBERALIZING EFFECTS OF TORT: HOW CORPORATE COMPLICITY LIABILITY UNDER THE ALIEN TORT STATUTE ADVANCES CONSTRUCTIVE ENGAGEMENT

[xi] Cristina Baez, et al.   MULTINATIONAL ENTERPRISES AND HUMAN RIGHTS,  8 U. Miami Int’l & Comp. L. Rev. 183 at 327

[xii] John G. Scriven, 16 Transnational Lawyer 153, 163 CORPORATE RESPONSIBILITY AND REGULATING THE GLOBAL ENTERPRISE.

[xiii] Kevin McNamara, The MacBride Principles: Irish America Strikes Back (2010), footnote 30.

[xiv] Miguel Helft, For Google, a Threat to China With Little Revenue at Stake, New York Times January 15, 2010 at A-10.

About the Author: Santiago A. Cueto is founding partner of the Cueto Law Group, P.L.  His practice includes complex litigation in federal and state courts. He is currently the lead attorney in a class action lawsuit against two of the world’s largest Internet domain name providers. The case has been featured in The National Law Journal, the ABA Law Journal, CNBC, Forbes and PC World magazines. Santiago may be reached by email at sc@cuetolawgroup.com.
Article Source


Sep 25 2011

Firewall’s Role in Internet Security

Firewall provides the best internet security. It controls the transfer and exchange of data between any two private networks. The restrictions are imposed by firewall on outgoing and incoming packages in networks. Each and every traffic should must pass through firewall either it may be incoming or outgoing. Firewall allows only authorized traffic thorough pass it. Choke points are the check points between public network and internal private network created by firewall.

Based on IP source and TCP port number, check points are created. VPNs can be implemented by firewall using tunnel mode capacity. There are different types of firewalls. Among them, Packet filters, Circuit-level gateways, Application level gate ways are important. In Packet filters, network traffic is processed on packet-by-packet basis. Generally firewall decreases the exposure of information and internal network system from public network. There will be a router in this type of firewall which connects the internal network to the internet, which is a screening router. This router screens the out going and incoming information in the server.

The other type of firewall is circuit-level gateways. This is a proxy server. Here, every packet is provided with a port number. If the rules set permit the port number, then only the server allows the packet into a new server. At the network level of OSI model only, this firewall works. Network Address Translation, which has the ability to hide IP address from the internet is the main advantage facilitated by this proxy server.

The third type of firewall that is, the Application-level gate ways is also a proxy server. This server operates at the TCP/IP level of application. The known protocol used in establishing a connection helps to forward the packet. Known protocol is mandatory. While sending or receiving the data, the entire messages are analyzed rather than individual packets of data. This type of firewall is notable for analyzing this type of data. Malicious software and anti-virus helps to get rid of virus and unwanted soft wares from the computer.

If you want to protect your children on facebook learn how to fight spam mail
Article Source