Blog (at) Mreza.Info

Peter N. M. Hansteen released an updated version of the »Firewalling with PF manuscript«.

This lecture is about firewalls and related functions, starting from a little theory along with a number of examples of filtering (from real life with the OpenBSD project's Packet Filter - PF) and other network traffic directing. He discusses PF firewall configuration on various BSDs - FreeBSD, OpenBSD and NetBSD. The lecture is a work in progress and will be updated periodically.

I just found this story at Wired News.

The U.S. military has assembled the world's most formidable hacker posse: a super-secret, multimillion-dollar weapons program that may be ready to launch bloodless cyberwar against enemy networks -- from electric grids to telephone nets.

;-)

5 critical and 3 important!

Go to Microsoft Security Bulletin Summary for April 2005 web page! You did yourself a favour if you already deployed Service Pack 1 for Windows Server 2003.

There is also a critical update for Microsoft Exchange Server - Vulnerability in Exchange Server Could Allow Remote Code Execution (KB894549)!

Microsoft updated three previously published security bulletins: MS05-002, MS05-009 and MS05-010.

Today Microsoft also released an updated version of its Malicious Software Removal Tool which now recognizes Hacker Defender (NT rootkit), Mimail, and Rbot malware specimen families.

Cool feature of explorer for some (restricted) enviroments. Try this (shortcut, run,...):

%windir%\explorer.exe /e,/root,%userprofile%\My Documents\

What's New in Terminal Services for Windows Server 2003 Service Pack 1
Microsoft® Windows Server™ 2003 Service Pack 1 includes several new features designed to maximize both the speed and efficiency of Terminal Services administration, and the security of communications between Terminal Services clients and servers. New features include additions to Group Policy settings for Terminal Services Licensing, a fallback printer driver setting, a new way to set authentication and encryption, and a new global setting for starting programs when clients connect to a terminal server.

Update for Exchange 2003 (KB 841561)
This update resolves problems that were found in Outlook Web Access since Exchange 2003 SP1 was released. Click the More Information About This Download link in the Related Resources section for a list of the fixes that are included in this update.

Exchange 2003: Management Pack Configuration Wizard
Provides a graphical user interface to configure Exchange 2000 and Exchange 2003 Management Pack, including test mailboxes, message tracking, and monitoring services.

Microsoft USB Flash Drive Manager (Standard)
Use this application to backup and restore presentation, pictures, songs and applications from and to USB Flash Drive devices and take them with you. Use USB Flash Drives to store personal data, to keep your network configuration and to share information with your friends. Microsoft USB Flash Drive.

Learn about and Install Windows Server 2003 SP1 at Microsoft TechNet Center.

I got this error million times today... ;-)

I just read this article at reuters.com. What the hell are they thinking? Like they don’t have enough compromised machines around the world already? Not to mention stupid "LAND attack" which is still unpatched. Or is this just another thoughtless statement from Microsoft?

I understand that Microsoft is U.S. company. But they have no right to shorten regular customers around the world! I don`t care for U.S. government personally. For me they are just a government like any others. Including Afganistan`s.

Quote:
Under a plan to take effect later this year, Microsoft will give the U.S. Air Force versions of software "patches" to fix serious security vulnerabilities up to a month before they are available to others, the paper said.

Edited 14.3.2005 Quote 2:
The U.S. government will not get a head start on other Windows users when it comes to Microsoft security updates, the company said Friday in response to news report that suggested otherwise.

The Wall Street Journal reported that the U.S. Air Force will receive early versions of software patches through Microsoft's Update Validation Program (SUVP) and those fixes will be forwarded to other agencies through the Department of Homeland Security.

Edited 14.3.2005 Related posts:

• Use Microsoft, get 0wned by USGov
• Govt. Gets Windows Updates First
• Air Force gets Microsoft patches first
• The Wall Street Journal got it wrong

Overview
Virtual Server is a Microsoft Windows®–based server application that is optimized to provide virtualization of Windows Server operating systems concurrently on a single physical server. In combination with the Windows Server 2003 operating system, Virtual Server provides a platform for implementing domain controllers in virtual machines. With this platform, you can install multiple Windows Server 2003 or Windows 2000 Server domain controllers in separate virtual machines on a single physical server. In this way, you can host multiple domains, multiple domain controllers for the same domain, or even multiple forests on one physical server that is running a single operating system.

Running domain controllers in virtual machines is best suited for test and pre-production piloting environments. With strict adherence to the requirements described in this document, domain controllers running in virtual machines can also be used in a production environment.

This document is intended for IT administrators, engineers, and architects who are evaluating using Virtual Server to host domain controllers that are running Windows Server 2003 or Windows 2000 Server in virtual machines.

Download whitepaper here...

After a day of testing...

I have already installed it on some test machines and also on my notebook and it works really great. Much better than all others I have tested. I hope it will stay free in future (at least for genuine* Microsoft Windows users ;-)

*What is genuine Microsoft software?

Genuine Microsoft software is software that is licensed by Microsoft, certified as authentic by Microsoft, and published and supported by Microsoft.