port 80 filtering Re: [FW1] WebSite being Hacked!!!

[Gill <jamgill@FW1-NOSPAMUU.NET>]

In CheckPoint I can build a mail CVP filter to disallow port 25 traffic
according to certain rules (effectively making CheckPoint a proxy for that
traffic).  Can such a thing be done to intelligently restrict questionable
http traffic accross port 80?

--gill

On Wed, 30 May 2001, Felix wrote:

> 
> Hi, all:
> 
>    one of my web server (IIS4.0 on NT 4.0 SP6a) which is behind my FW1-4.1
> sp3 has been hacked.
> I think the hacker used script via IE explorer to hack it.
>   My questions are:
> 1. How to prevent from ports scanning through Internet.
> 2. How to prevent from being hacked through port 80.
> 3. How can I enable the Intruder Detect system (not only ip spoofing)
> 
> Thanx!
> 
> 
> 
> ================================================================================
>      To unsubscribe from this mailing list, please see the instructions at
>                http://www.checkpoint.com/services/mailing.html
> ================================================================================
> 

-- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- -- --
--gill  | Tatu Ylonen, SSH 1.2.12 README:  "Beware that the most effective
        | way for someone to decrypt your data may be with a rubber hose."



================================================================================
     To unsubscribe from this mailing list, please see the instructions at
               http://www.checkpoint.com/services/mailing.html
================================================================================