Adjustment Firewall under ICQ
As a subject of safety important, and for time of her not okhvatish`, we have segmented our series of clauses{articles}, and this time (in the second part) consider{examine} adjustment faervola under icq clients. We learn{we find out} fine features trillian, sim and icq and, certainly, we increase the safety.
So, we shall begin that at you already costs{stands} faervol with the advanced adjustments which allow to create rules worth spent time on the present. The first, that is necessary to make it to allow{resolve} to any icq to the client access to a network (access to network).
The second - to open the necessary ports for standard job:
The removed port 5190 to resolve the entering traffic on any local (connection to icq server)
The removed port 5190 to resolve the proceeding traffic on any local (connection to icq server)
listening port (expectation of connection) locally about 1025 ports up to 65535 and far off as, about 1025 ports on 65535 (it is used for creation of connection between computers of interlocutors)
The everything else is desirable for closing. But, if you are going to to use in yours icq the client additional modules besides usual dialogue, for example, weather or check emailov, to you is necessary to expand accordingly a field of his activity in faervole. Better you, certainly, have solved, that safety first of all, and adhered to the first offer in this paragraph …
Various icq clients it is possible to attribute{relate} to some built - in features, for example, these:
trillian, at start tries in the beginning it will be connected not to icq to the server, and to 66.216.70.167 (ceruleanstudios.com, www.ceruleanstudios.com) through 80 port.
The same way at installation sim, creates time files which are connected to 66.35.250.209 (projects.sourceforge.net, sim-icq.sourceforge.net) through 80 port and download additional modules.
It approaches you whether or not, decide. But, if you want to open a web the addresses received in the message at once in a browser, it is necessary in yours firewall (if he has concept wide windows hook) to make the admission. Thus you simplify to yourselves a life a little, but will open one more gap for Trojans.
So, actually actually and everything, that will be necessary for you for standard job with icq though …, still I shall add, that, having closed all ports except for necessary, or having brought 80 port to blocked, you hardly will see importunate advertising in original icq the client from mirabilis as the report http is necessary for him for it and it is not necessary patchit` it for it

|