I think the difficulty in the challenge is directly related to the sanity of the challenge. Why would you want to, under any circumstances, connect a Windows box directly to the Internet (that context is assumed by the article)? A small hardware firewall sounds like a great solution, and will have none of the weakness of inherently risky software firewalls. Linux iptables is by no means a perfect software solution either. The best solution, I think, would be a hardware firewall device that restricts ssh into the Windows host to trusted hosts only, then allows serial console access back into itself.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/307/30912#30912