Koozali.org: home of the SME Server

Norton Security check

Henry

Norton Security check
« on: August 14, 2001, 09:50:16 AM »
After installing Norton System works 2001 on a win98se client, I discovered a security check application. It found the ip address of my e-smith box and told me that I had some security holes because it could connect to that computer. It never saw the ip address of the client win98 box.

I don't think I have a security problem, but I wanted to know what was going on here.
Obviously, the Norton app is looking at the e-smith box, but how is it doing the checking and what is it seeing?

The results have me puzzled.

Thanks in advance.

Henry

Confucius

Re: Norton Security check
« Reply #1 on: August 14, 2001, 12:51:35 PM »
Hi,

I also have been running several portscanners on e·Smith. You shouldn't forget that u are running Norton from INSIDE your network. IF you are not able to connect to the server at all Norton wouldn't 'complain' about security. Because you want to be able to connect to the server there must be ports open to do so offcourse.

If u really like to be concerned about security maybe you better run a scan from the internet like u can find at www.sdesign.com f.e. That way u'll see that your server is pretty secure. 100% is impossible offcourse because hackers are just as active as you or me, and we progress too.

conclusion..... : no worries, your server is doing what it suppose to do.

benoit

Re: Norton Security check
« Reply #2 on: August 14, 2001, 08:29:02 PM »
relax this test is intended for win98 machine and will freak out if you have ports open. yes it is a security risk to have ports open but your running a server... no ports open no services... E-smith is very secure whit the standar installation if you have open services like ssh ou ftp it become more insecure but you have to decide if the potential security risk overcome the advantage of the services in most case they do not.

Henry

Re: Norton Security check
« Reply #3 on: August 15, 2001, 10:58:13 AM »
I'm not worried about the security of the e-smith server. I was wondering what the Symantic app was looking at in the security check operation.

Thanks for your comments.

H