Re: Security hole in Win2K's FTP server

[avalon () COOMBS ANU EDU AU (Darren Reed)]

In some mail from David LeBlanc, sie said:
[...]
> Here's where I'd like to clarify things.  The most flexible way to
> configure port filters on Win2k is through an IPSec policy, which can also
> be enforced via propogation from the DC (saving you from having to run
> around to each workstation).  Take care to put all affected machines in a
> "OU" (Organizational Unit) so you don't get all your servers, too.

...and if you don't want to run a DC or you're using Linux as your DC ?

I'm sure if you build your house with Microsoft bricks and Microsoft
bricks only, things are different.  This sounds, to me, as if Microsoft
products are inherently insecure/weaker in a heterogenous environment.

Darren
IP Filter: Protecting Firewall-1 from the Internet