From owner-freebsd-isp@FreeBSD.ORG Mon Jul 19 16:47:47 2004 Return-Path: Delivered-To: freebsd-isp@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 9020216A4CE for ; Mon, 19 Jul 2004 16:47:47 +0000 (GMT) Received: from smtpout.mac.com (smtpout.mac.com [17.250.248.87]) by mx1.FreeBSD.org (Postfix) with ESMTP id 81C4D43D48 for ; Mon, 19 Jul 2004 16:47:47 +0000 (GMT) (envelope-from cswiger@mac.com) Received: from mac.com (smtpin02-en2 [10.13.10.147]) by smtpout.mac.com (Xserve/MantshX 2.0) with ESMTP id i6JGldBC025284; Mon, 19 Jul 2004 09:47:39 -0700 (PDT) Received: from [10.1.1.193] (nfw1.codefab.com [199.103.21.225]) (authenticated bits=0) by mac.com (Xserve/smtpin02/MantshX 4.0) with ESMTP id i6JGlcKR004262; Mon, 19 Jul 2004 09:47:38 -0700 (PDT) In-Reply-To: <001401c46da4$c5975570$0b01000a@SPIDEY> References: <001401c46da4$c5975570$0b01000a@SPIDEY> Mime-Version: 1.0 (Apple Message framework v618) Content-Type: text/plain; charset=US-ASCII; format=flowed Message-Id: <5706CF46-D9A3-11D8-8C40-003065ABFD92@mac.com> Content-Transfer-Encoding: 7bit From: Charles Swiger Date: Mon, 19 Jul 2004 12:47:37 -0400 To: spidey@act.co.za X-Mailer: Apple Mail (2.618) cc: freebsd-isp@freebsd.org Subject: Re: Spyware & AD Ware X-BeenThere: freebsd-isp@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Internet Services Providers List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 19 Jul 2004 16:47:47 -0000 On Jul 19, 2004, at 11:26 AM, Spidey Knepscheld wrote: > How do I stop Spyware and AD Ware to enter my network through a FreeBSD > FW or can I stop it on the Cisco ? A FreeBSD firewall using a good ruleset will help block spyware and adware. Using a virus scanner like ClamAV in conjunction with mail and a WWW proxy server like Squid can also help. A tool like Snort and related can provide some degree of intrusion-detection capabilities. All of that being said, how the Windows box is administered and kept up-to-date, and whether the user of the Windows box is careful, matters more. Not running Windows at all is by far the best way of avoiding spyware and adware.... -- -Chuck