Cainiao Security doubles: proficient in firewall Q &

Wherever the network exists, it will inevitably be threatened by many insecure factors. Installing a firewall in the system is undoubtedly the best and most effective choice. Since we hope that the firewall will become a security barrier between personal computers and networks, we must have a thorough understanding of all aspects of the firewall to get twice the result with half the effort and achieve the expected results.

Q: How can I enable and Disable Windows 2003 firewall?

A: You can directly set the NIC attribute or enable the service on your own.

**************************************** ***************

Q: In addition to Norton 8.1, which anti-virus software can support Windows 2003?

A: Both McAfee VirusScan Enterprise and Kaspersky Anti-Virus for NT Server are supported. However, the only version that has passed Windows 2003 certification is the trend SPNT 5.57 Chinese version.

**************************************** **************

Q: Windows 2000 Server has installed the ZoneAlarm Pro firewall and the Terminal Service for remote control. The connection request cannot be remotely connected to the terminal service due to any configuration, which is probably forbidden by ZoneAlarm Pro. How should I configure ZoneAlarm Pro to allow Terminal Service connection?

Answer: open port 3389.

**************************************** ***********

Q: I encountered the following problems when using Norton Internet Security: first, Discuz failed to submit the Security check due to hard blocking of incoming information, when posting, the system prompts undefined operations. Second, the Discuz code assist prompt during posting is judged as ad information and not executed due to incorrect judgment. What is the solution?

A: modifying Norton's default configuration can avoid the above problems. The method is as follows (the Chinese version of Norton Internet Security 2003 is used as an example ).

1. In the "options" window, select "Norton Internet Security> Web content> site Browsing Information" and select "allow ".

2. Select "prohibit advertisement> Configure" to cancel the "enable prohibit advertisement" check box.

After the above modification, you can still smoothly access Discuz on the machine with Norton Internet Security installed! And other websites.

**************************************** ********************

Q: someone in the organization uses BT to download a large number of things. In the past, it seems very effective for me to disable port 6969 on the firewall, but it seems that it has no effect recently. Do you have any suggestions?

A: Use the firewall to seal all ports 6999-9999. However, they will also open other ports and use monitoring to check which port they use.

**************************************** *******************

Q: A friend's laptop is mainly used to write articles, check online and play games, and do not do much about other things. After the ZoneAlarm firewall was installed in the system in March, it began to appear: If there is no traffic in the ADSL Network (that is, there is no access point, it will be interrupted in about 10 minutes, then the machine will repeat the dial-up connection! I have been checking for half a day, but I cannot find any problem. What is the possible reason?

A: Generally, such firewalls have the function of automatic disconnection when the network is idle. In general, this function is enabled by default, the solution to this friend's problem is actually very simple. You just need to remove this function.

**************************************** ********************

Q: The machine installed with the Kerio Personal Firewall 2.1.5 Firewall is a direct dial-up Internet access ADSL, and the two machines are connected to the Hub, and the Internet is connected through the sharing of Windows XP. After the firewall is installed, the other server cannot access the Internet, no matter what it does. What kind of rules do you need to create?

A: Choose "manage> firewall> advanced> Microsoft Network" and select "allow other users to access my shared folders and printers.

**************************************** ****************

Q: Every time I send a message via QQ, Norton will scan the virus. If the program savscan.exe is stored in the memory and the file cannot be forcibly closed in the background, a prompt will appear when it is closed, but the scan continues, as if it was scanning a file in msg. db. During the scanning process, I used QQ very slowly, and the CPU usage was very high. How can I disable Norton's scan for QQ viruses?

A: In the Norton Program Options, select "system> automatic protection> exclude" and add the QQ program to the project to be excluded in the list on the right ". Select "Others> threat category> exclude" and add the QQ program to the list on the right.