If IE uses a DUN connection to connect to the internet then you need to alter the properties of that specific connection, not the LAN properties. The Proxy Settings specified in the article only apply when IE retrieves pages over a LAN connection. You will still be vulnerable to the theorised gopher attack if you only change your LAN settings and then contact a server via a DUN connection.

Or does nobody use DUN these days? :)

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/464/12902#12902