PROBLEMCHYLD

1. Disable Windows Firewall and Security Center. 2. Create a folder in C:\Program Files\Firewall. 3. Run MMC from run-box in the Start Menu. Create a Snap-in from Microsoft Console Root with IP Security Monitor + IP Security Polices on Local Computer. 4. Name Snap-in IPSECMD.MSC. 5. Place the Snap-in file C:\Program Files\Firewall and create a shortcut from it. Name it Windows Firewall. 6. Extract or copy FIREWALL.CAB contents to C:\Program Files\Firewall. 7. Edit IPSECCMD.BAT to your likes, then run it. 8. Run Windows Firewall shortcut and click IP Security Polices on Local Computer. Right-click to Assign the Policies. (Activate/Turn on). 9. Use IPSECCMD.HTA to monitor your network. Credit goes to http://www.ericphelps.com/scripting/samples/Netstat/index.html FIREWALL.CAB

Yeah, I'm using it as we speak. I'll release what I have and maybe someone can improve on it.

All the patches in the world couldn't keep Windows 9x alive, XP is NO different. I'll do a clean install once support ends. HNY!!!

Some years back, I would use MalwareBytes & MSE to clean family and friends computers slaving the HDD. Great combination and never conflicted with each other.

Well, I haven't use a Virus Scanner or Malwarebytes in years. What are you guys gonna do when the definitions stop or become incompatible?

No problems here either on my WinXP machine.

My rules come from here in case you're wondering. https://www.wilderssecurity.com/threads/tutorial-expert-linux-firewalling.376935/

I just switched my Slackware Linux to Wifi Hotspot and it respects the iptables rules. Here are my rules, might help you if nothing else. iptables -P OUTPUT DROP iptables -P INPUT DROP iptables -P FORWARD DROP iptables -A INPUT -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP iptables -A OUTPUT -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP iptables -N drop_invalid iptables -A OUTPUT -m state --state INVALID -j drop_invalid iptables -A INPUT -m state --state INVALID -j drop_invalid iptables -A INPUT -p tcp -m tcp --sport 1:65535 --tcp-flags FIN,SYN,RST,PSH,ACK,URG NONE -j drop_invalid iptables -A drop_invalid -j LOG --log-level debug --log-prefix "INVALID state -- DENY" iptables -A drop_invalid -j DROP iptables -N In_RULE_0 iptables -A INPUT -i wlan0 -s darkstar -j In_RULE_0 iptables -A In_RULE_0 -j LOG --log-level info --log-prefix "RULE 0 -- DENY" iptables -A In_RULE_0 -j DROP iptables -N In_RULE_1 iptables -A INPUT -p icmp -m icmp --icmp-type any -j In_RULE_1 iptables -A In_RULE_1 -j LOG --log-level info --log-prefix "RULE 1 -- DENY" iptables -A In_RULE_1 -j DROP iptables -N In_RULE_2 iptables -A INPUT -p tcp -m tcp --dport 43 -j In_RULE_2 iptables -A In_RULE_2 -j LOG --log-level info --log-prefix "RULE 2 -- DENY" iptables -A In_RULE_2 -j DROP iptables -N In_RULE_3 iptables -A INPUT -p tcp -m tcp --tcp-flags ALL URG,PSH,FIN -j In_RULE_3 iptables -A In_RULE_3 -j LOG --log-level info --log-prefix "RULE 3 -- DENY" iptables -A In_RULE_3 -j DROP iptables -N In_RULE_4 iptables -A INPUT -p tcp -m tcp --tcp-flags ALL URG,ACK,PSH,RST,SYN,FIN -j In_RULE_4 iptables -A In_RULE_4 -j LOG --log-level info --log-prefix "RULE 4 -- DENY" iptables -A In_RULE_4 -j DROP iptables -N In_RULE_5 iptables -A INPUT -p all -f -j In_RULE_5 iptables -A In_RULE_5 -j LOG --log-level info --log-prefix "RULE 5 -- DENY" iptables -A In_RULE_5 -j DROP iptables -N In_RULE_6 iptables -A INPUT -p udp -m udp --dport 513 -j In_RULE_6 iptables -A In_RULE_6 -j LOG --log-level info --log-prefix "RULE 6 -- DENY" iptables -A In_RULE_6 -j DROP iptables -N In_RULE_7 iptables -A INPUT -p udp -m udp --dport 33434:33524 -j In_RULE_7 iptables -A In_RULE_7 -j LOG --log-level info --log-prefix "RULE 7 -- DENY" iptables -A In_RULE_7 -j DROP iptables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A OUTPUT -o lo -j ACCEPT iptables -A FORWARD -o lo -j ACCEPT iptables -A OUTPUT -p tcp -m tcp ! --tcp-flags SYN,RST,ACK SYN -m state --state NEW -j DROP iptables -A OUTPUT -m state --state ESTABLISHED,RELATED -j ACCEPT iptables -A OUTPUT -p udp -m udp --dport 53 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m udp --sport 67 --dport 68 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m udp --sport 123 --dport 123 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m tcp --dport 6667 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m tcp --dport 6697 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m tcp --dport 6881 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m udp --dport 6881 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m tcp --dport 8881 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m udp --dport 7881 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m udp --dport 8881 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m multiport --dports 25,110,143,465,587,993,995 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p tcp -m multiport --dports 80,443 -m state --state NEW -j ACCEPT iptables -A OUTPUT -p udp -m multiport --dports 500,1701,4500 -m state --state NEW -j ACCEPT iptables -N RULE_17 iptables -A OUTPUT -p tcp -m tcp --dport 20:21 -j RULE_17 iptables -A OUTPUT -p tcp -m tcp --sport 1024: --dport 1024: -j RULE_17 iptables -A RULE_17 -j LOG --log-level info --log-prefix "RULE 17 -- ACCEPT" iptables -A RULE_17 -j ACCEPT iptables -N RULE_18 iptables -A OUTPUT -p 47 -j RULE_18 iptables -A INPUT -p 47 -j RULE_18 iptables -A OUTPUT -p tcp -m tcp --dport 1723 -j RULE_18 iptables -A RULE_18 -j LOG --log-level info --log-prefix "RULE 18 -- ACCEPT" iptables -A RULE_18 -j ACCEPT iptables -N RULE_19 iptables -A OUTPUT -p tcp -m tcp --dport 3389 -j RULE_19 iptables -A OUTPUT -p udp -m udp --dport 3389 -j RULE_19 iptables -A RULE_19 -j LOG --log-level info --log-prefix "RULE 19 -- ACCEPT" iptables -A RULE_19 -j ACCEPT iptables -N RULE_20 iptables -A OUTPUT -s 192.168.0.0/24 -d 192.168.0.0/24 -j RULE_20 iptables -A INPUT -s 192.168.0.0/24 -d 192.168.0.0/24 -j RULE_20 iptables -A RULE_20 -j LOG --log-level info --log-prefix "RULE 20 -- ACCEPT" iptables -A RULE_20 -j ACCEPT iptables -N RULE_21 iptables -A OUTPUT -p udp -m udp -j RULE_21 iptables -A INPUT -p udp -m udp -j RULE_21 iptables -A RULE_21 -j LOG --log-level info --log-prefix "RULE 21 -- DENY" iptables -A RULE_21 -j DROP iptables -N RULE_22 iptables -A OUTPUT -p tcp -m tcp -j RULE_22 iptables -A INPUT -p tcp -m tcp -j RULE_22 iptables -A RULE_22 -j LOG --log-level info --log-prefix "RULE 22 -- DENY" iptables -A RULE_22 -j DROP iptables -N RULE_23 iptables -A OUTPUT -d darkstar -j RULE_23 iptables -A INPUT -j RULE_23 iptables -A RULE_23 -j LOG --log-level info --log-prefix "RULE 23 -- DENY" iptables -A RULE_23 -j DROP

Rev 06 Updated OpenSSL v1.0.2q Download in first post

Does your router have dmz mode?

This type of tactic is gonna force people to upgrade all computer and devices just to fatten the pockets of the greedy giants. I'll go back to a flip phone before I keep flushing my hard-earned money down the drain. This generation needs to learn what boycott means.

Interesting article jaclaz, but I believe its a smoke screen. Why are some many vendors killing off support for older OS? We all know that Microsoft is here to make money. The Linux + Windows combination propaganda is for the blinded sheep. If Microsoft is not benefiting from it, I don't see involvement from them. Being optimistic, anything is possible... Microsoft is about making billions of dollars, that's it, that's all !!! For Linux to be free and open source, their pockets are nowhere near MS and Apple. In other words, MS ain't going or giving anything away for free. These are facts. I see Apple capitalizing off Microsoft downfall, its surely happening now as we speak.

@ FranceBB, Some say the best things in life are free, I disagree. I see myself in the future becoming an Apple NUT, if Microsoft don't get it together. I do have until the death of Win 7. Hopefully by then Microsoft would've gotten the message. Nonetheless, Skype does allow me to communicate with my family when I'm away from home, which is a major PLUS+ for me.

Linux isn't too much better. Some software will NOT run if you're not using the latest distro. Some software requires massive libs. Some software is 64bit only. For the most part you should get the basics out of it...

I'm not a programmer and I only use Skype when I'm away from home. When I did a fresh install of WinXP, I didn't even bother to install it.