How much security?
Plastic PPRuNer
BOAC - not sure if I'm understanding you correctly but what I have done is set up everything the way I want it for the browser and then just precede the command invoking it with drive:\path\dropmyrights /args drive:\path\whateverbrowser.exe
Haven't had any probs. personally - did you look at the setup instructions in the last URL I quoted?
:ok:
PS: The few girls in my office still on MS are set up to work browser and email at lower privilege levels using DropMyRights and are OK.
Haven't had any probs. personally - did you look at the setup instructions in the last URL I quoted?
:ok:
PS: The few girls in my office still on MS are set up to work browser and email at lower privilege levels using DropMyRights and are OK.
Per Ardua ad Astraeus
Join Date: Mar 2000
Location: UK
Posts: 18,579
Likes: 0
Received 0 Likes
on
0 Posts
did you look at the setup instructions in the last URL I quoted?
- nah! Thanks. Due to Chocolateitis I used the first link which had me create a 'new' icon - doh! That should sort it, but it does appear that you will need to 're-create' the icon in order to make any changes above basic levels?Edit to add : That did not work. I still get a default to MSN even copying the existing icon which had a different home page.
Further edit: If I then run it as 'admin' it has the right home page. I assume the block on changing home page is to stop browser hijack? Are you saying you can change the home page? I cannot even get rid of the 'default browser' query in 'low' access mode.
Last edited by BOAC; 12th Apr 2009 at 11:33.
Thread Starter
Apologies Keef
I had thought that the thread was beginning to fade of its own accord so hadn't looked at it for a couple of days; no ingratitude or churlishness on my part - promise.
I took the advice and that of the free software sticky and downloaded Zonealarm on Friday evening and did a scan with it, which came up clean. However, after that, every single action seemed to take ages to achieve and was accompanied by "security warning!!" with an unintelligible "explanation" in it. Following a link seemed to take forever and eventually I decided I didn't want this to be the future and uninstalled it and it's all working normally again.
Is that what you meant by "it can be a bit of a pain at first" and how long can it go on for?
I/we have an HP Pavilion slimline (mini tower) amd the modem is a Speedtouch 330 supplied by Tiscali. I have read that the catch with this modem is that the system "sees" it as a dial-up connection, but as I shut it down every night after a disc cleanup I don't see this as a major handicap. Owt else? all tips gratefully received.
BTW were you up late preparing your Easter sermon and opted for a spot of pruning after??
TIA The Ancient Mariner
I took the advice and that of the free software sticky and downloaded Zonealarm on Friday evening and did a scan with it, which came up clean. However, after that, every single action seemed to take ages to achieve and was accompanied by "security warning!!" with an unintelligible "explanation" in it. Following a link seemed to take forever and eventually I decided I didn't want this to be the future and uninstalled it and it's all working normally again.
Is that what you meant by "it can be a bit of a pain at first" and how long can it go on for?
I/we have an HP Pavilion slimline (mini tower) amd the modem is a Speedtouch 330 supplied by Tiscali. I have read that the catch with this modem is that the system "sees" it as a dial-up connection, but as I shut it down every night after a disc cleanup I don't see this as a major handicap. Owt else? all tips gratefully received.
BTW were you up late preparing your Easter sermon and opted for a spot of pruning after??
TIA The Ancient Mariner
Official PPRuNe Chaplain
Join Date: Apr 2001
Location: Witnesham, Suffolk
Age: 80
Posts: 3,498
Likes: 0
Received 0 Likes
on
0 Posts
No worries! No, I'm just an owl rather than a lark. I like the Easter Service being at 11 am 
ZoneAlarm is like that. At first, it has to be told that each bit of software is allowed to access the trusted zone and the internet. After a while, all the software you use has been checked, and it goes quiet. The critical bit is when something you don't recognise pops up.
I don't know the Speedtouch 330 at all, so can't say if it has any kind of firewall facility or how to close incoming ports on it..
There is a way to do some searching in the modem, but before we do that....
DOES ANYONE IN HERE KNOW HOW TO CLOSE PORTS IN A SPEEDTOUCH 330?
ZoneAlarm is like that. At first, it has to be told that each bit of software is allowed to access the trusted zone and the internet. After a while, all the software you use has been checked, and it goes quiet. The critical bit is when something you don't recognise pops up.
I don't know the Speedtouch 330 at all, so can't say if it has any kind of firewall facility or how to close incoming ports on it..
There is a way to do some searching in the modem, but before we do that....
DOES ANYONE IN HERE KNOW HOW TO CLOSE PORTS IN A SPEEDTOUCH 330?
Thread Starter
Zonealarm et alia
OK, understood, I'll give it another go.
Speedtouch 330 is (probably) a cheap and nasty which is why Tiscali use it. Yeah yeah I know but who to move to that isn't as bad if not worse.
TVM
The Ancient Mariner
Speedtouch 330 is (probably) a cheap and nasty which is why Tiscali use it. Yeah yeah I know but who to move to that isn't as bad if not worse.
TVM
The Ancient Mariner
Spoon PPRuNerist & Mad Inistrator
The Speedtouch 330 is not a firewall / router - it's a plain old USB-RJ11 ADSL bridge.
Totally reliant on a software firewall for any protection.
If you want a hardware firewall, probably best to go for an integrated ADSL firewall / router - possibly with built-in wireless access also. This will completely replace your Speedtouch 330.
Lots of vendors - Linksys, Draytek, Netgear, Buffalo...
I can't recommend a specific model, as I have cable rather than ADSL, but Linksys and Draytek have a particularly good reputation, with Netgear perhaps a little bit behind.
SD
Totally reliant on a software firewall for any protection.
If you want a hardware firewall, probably best to go for an integrated ADSL firewall / router - possibly with built-in wireless access also. This will completely replace your Speedtouch 330.
Lots of vendors - Linksys, Draytek, Netgear, Buffalo...
I can't recommend a specific model, as I have cable rather than ADSL, but Linksys and Draytek have a particularly good reputation, with Netgear perhaps a little bit behind.
SD
Join Date: Jan 2008
Location: LONDON
Age: 51
Posts: 525
Likes: 0
Received 0 Likes
on
0 Posts
Saab is correct that a much cleaner and more efficient option would be to go to a proper hardware firewall as incorporated into a NAT Router.
A cheaper option would be to use something like windows firewall which is built into xp (is it sp2 onwards its present from I cant recall) or vista. However it may be that if this is already enabled (which it could well be if all other ports seem shut) then your OS thinks your running a web server and is allowing this through.
At which point you could un-install the web server part of the OS but that would be a whole different thread altogether - it would be easier to just disable the service and leave the port open - but this has the downside of you being visible on the net.
A cheaper option would be to use something like windows firewall which is built into xp (is it sp2 onwards its present from I cant recall) or vista. However it may be that if this is already enabled (which it could well be if all other ports seem shut) then your OS thinks your running a web server and is allowing this through.
At which point you could un-install the web server part of the OS but that would be a whole different thread altogether - it would be easier to just disable the service and leave the port open - but this has the downside of you being visible on the net.
Official PPRuNe Chaplain
Join Date: Apr 2001
Location: Witnesham, Suffolk
Age: 80
Posts: 3,498
Likes: 0
Received 0 Likes
on
0 Posts
OK - I thought I'd read somewhere about configuring a Speedtouch 330.
If you are worried about being secure (I am), then I'd get onto eBay and buy a one piece modem/router. If you may want to use wireless internet round the home, then for a few pounds more you can get a WiFi one.
Something like a Netgear DG834 is plentiful so there are likely to be lots on eBay. Make sure it's a modem/router rather than a USB device. If it comes with the instruction manual, that'll save some Googling!
Linksys are OK too. Draytek are excellent but a bit dearer.
Check that it's a "telephone" rather than a "cable" modem.
If you are worried about being secure (I am), then I'd get onto eBay and buy a one piece modem/router. If you may want to use wireless internet round the home, then for a few pounds more you can get a WiFi one.
Something like a Netgear DG834 is plentiful so there are likely to be lots on eBay. Make sure it's a modem/router rather than a USB device. If it comes with the instruction manual, that'll save some Googling!
Linksys are OK too. Draytek are excellent but a bit dearer.
Check that it's a "telephone" rather than a "cable" modem.
Spoon PPRuNerist & Mad Inistrator
One other thing to check is that the PC has a standard RJ45 network card (or built-in RJ45 network interface), as it will connect to the router this way - at least to configure it.
SD
SD
Thread Starter
last two posts
Keef and SD
Thanks both. I've been considering moving to a router since SWMBO has bought herself a laptop. Ideally I'd like to move away from Tiscali at the same time. The deterrent is the admin flail of tying all this up in a oner, vide moving in to this house two years ago (all of 100 ft from the old one) meant no landline phone for 6 weeks and no internet for eight. PITA only begins to describe it.
The Ancient Mariner
Thanks both. I've been considering moving to a router since SWMBO has bought herself a laptop. Ideally I'd like to move away from Tiscali at the same time. The deterrent is the admin flail of tying all this up in a oner, vide moving in to this house two years ago (all of 100 ft from the old one) meant no landline phone for 6 weeks and no internet for eight. PITA only begins to describe it.
The Ancient Mariner
Spoon PPRuNerist & Mad Inistrator
Putting in a combined ADSL modem / router (with or without wifi) is really independent of which ISP you choose. You would be able to use the device with whatever ADSL service provider you go with.
Of course if you are switching from ADSL to cable, you might well want a different router.
It is possible that another provider might include a wifi router / firewall with their package, though. Maybe read up the possibilities and offerings before taking the plunge.
SD
Of course if you are switching from ADSL to cable, you might well want a different router.
It is possible that another provider might include a wifi router / firewall with their package, though. Maybe read up the possibilities and offerings before taking the plunge.
SD
Official PPRuNe Chaplain
Join Date: Apr 2001
Location: Witnesham, Suffolk
Age: 80
Posts: 3,498
Likes: 0
Received 0 Likes
on
0 Posts
If you are thinking of changing ISP, and if your telephone is still with "BT" for wires (ie not been local-loop-unbundled) then switching ISP should be relatively simple.
I've changed three times over the years: the first was a nightmare, the second and third relatively straightforward, although Pipex tried to charge me for another six months after I'd left them. A formal complaint to their MD with a promise that the next would be to somewhere else sorted that.
There are several websites that offer customer feedback on how well the various ISPs perform. Tiscali tend to be towards the bottom of the scale with some good reports, some bad.
I used to use DSLZone but their website seems to be unmanned, and the number of reports hasn't changed much of late. I think Thinkbroadband.com is the main one these days.
Some ISPs do indeed offer a free modem/router/whatever, but they then tie you into a 12 or 18-month contract. I prefer a "quick getout" option and to buy my own device.
You can pick up a Netgear DG834 wireless modem router for around £30 on eBay.
I've changed three times over the years: the first was a nightmare, the second and third relatively straightforward, although Pipex tried to charge me for another six months after I'd left them. A formal complaint to their MD with a promise that the next would be to somewhere else sorted that.
There are several websites that offer customer feedback on how well the various ISPs perform. Tiscali tend to be towards the bottom of the scale with some good reports, some bad.
I used to use DSLZone but their website seems to be unmanned, and the number of reports hasn't changed much of late. I think Thinkbroadband.com is the main one these days.
Some ISPs do indeed offer a free modem/router/whatever, but they then tie you into a 12 or 18-month contract. I prefer a "quick getout" option and to buy my own device.
You can pick up a Netgear DG834 wireless modem router for around £30 on eBay.
Thread Starter
Night Owl
You are one aren't you?
I usually check thinkbroadband.com most days to keep a check on speeds. In the sticks here, BT claim the line will support only 512kbs, but in the mornings I usually get 940/950kbs. For about three days in Feb I actually got 1.3 mbs! Hold me back! But in the evenings it drops frequently to 250/480kbs which makes a mockery of trying to use things like iPlayer.
Inertia is the main reason I haven't moved before, I confess, but I see my daughter in Bristol having the same indifferent level of service from her ISP. My son in Lincoln has had more ISPs than I've hot dinners and also suffers from erratic performance and he can almost spit on the exchange from his place.
I think my general thesis is that ALL ISPs are crap and that occasional adequate performance is a bonus anywhere in the UK outside big cities. It must be my inate Wee Free pessimism coming through. Thanks again, though, for all your helpful suggestions.
The Ancient Mariner
I usually check thinkbroadband.com most days to keep a check on speeds. In the sticks here, BT claim the line will support only 512kbs, but in the mornings I usually get 940/950kbs. For about three days in Feb I actually got 1.3 mbs! Hold me back! But in the evenings it drops frequently to 250/480kbs which makes a mockery of trying to use things like iPlayer.
Inertia is the main reason I haven't moved before, I confess, but I see my daughter in Bristol having the same indifferent level of service from her ISP. My son in Lincoln has had more ISPs than I've hot dinners and also suffers from erratic performance and he can almost spit on the exchange from his place.
I think my general thesis is that ALL ISPs are crap and that occasional adequate performance is a bonus anywhere in the UK outside big cities. It must be my inate Wee Free pessimism coming through. Thanks again, though, for all your helpful suggestions.
The Ancient Mariner
Thread Starter
Rural probs
AhBut Ahbut Ahbut Ah..... Green granite
How far from the exchange? We're at least 3 miles, on a line that is some below ground some above ground lots of patches in the cables and the odd junction box that collects the wet. (I found all this out when Outreach was trying to get me any connection at all during previously mentioned house move).
Now they charge £240/h if you need anything doing. Our neighbour was having a phone problem and the engineer said "I've checked the line to your house and it's OK. If I step inside to investigate further you're looking at £60 per 15 mins plus the call-out charge. I suggest you find a competent electrician to do that bit" and left! It's called enhanced customer service.
The Ancient Mariner
How far from the exchange? We're at least 3 miles, on a line that is some below ground some above ground lots of patches in the cables and the odd junction box that collects the wet. (I found all this out when Outreach was trying to get me any connection at all during previously mentioned house move).
Now they charge £240/h if you need anything doing. Our neighbour was having a phone problem and the engineer said "I've checked the line to your house and it's OK. If I step inside to investigate further you're looking at £60 per 15 mins plus the call-out charge. I suggest you find a competent electrician to do that bit" and left! It's called enhanced customer service.
The Ancient Mariner
Official PPRuNe Chaplain
Join Date: Apr 2001
Location: Witnesham, Suffolk
Age: 80
Posts: 3,498
Likes: 0
Received 0 Likes
on
0 Posts
Correct! I'm in a Norfolk village at the moment, and the modem reports
DownStream Connection Speed 8128 kbps
UpStream Connection Speed 448 kbps
The exchange is out of spitting range, but a carefully lobbed stone might get close.
Back in urban Essex, I get 3360k down. That's about 3 km from the exchange.
I tried a variety of modem/routers there, and found that the better quality ones did a better job. Draytek sent me a special firmware set for "poor signal areas" and it did make a significant difference. I "lost" a couple of refinements that I never used anyway, and gained a very rugged connection.
I think some ISPs try harder than others. I have a simple approach these days: if Customer Service is an 0900 number or I get an Indian reading off a set script, that one's off my list. An Indian who knows what he's talking about is fine (I've had one or two excellent experiences in that arena).
Essex is with UKFSN and I have no problems at all. It's a one-man-band, and he's not been to charm school, but he knows his stuff and does a good job. Entanet is the provider behind that, and they seem to have gone astray lately from what I read by others. They tried to change the contracts, and UKFSN got tough with them on his customers' behalf.
Norfolk is with PlusNet, purely because they were cheapest by far at the time and i wasn't too bothered about quality. In practice, it's been excellent. I've not seen any capping or other messing about with the ADSL - but I'm not a heavy user from here.
I think the problem is in part at the interface between BT and the ISPs. When I was having serious problems in Essex, BT blamed Pipex and Pipex blamed BT. In the end, I made a courteous but firm suggestion to both of them that they could try talking to each other. I don't know if they ever did: I gave up and moved ISP and the problems went away.
DownStream Connection Speed 8128 kbps
UpStream Connection Speed 448 kbps
The exchange is out of spitting range, but a carefully lobbed stone might get close.
Back in urban Essex, I get 3360k down. That's about 3 km from the exchange.
I tried a variety of modem/routers there, and found that the better quality ones did a better job. Draytek sent me a special firmware set for "poor signal areas" and it did make a significant difference. I "lost" a couple of refinements that I never used anyway, and gained a very rugged connection.
I think some ISPs try harder than others. I have a simple approach these days: if Customer Service is an 0900 number or I get an Indian reading off a set script, that one's off my list. An Indian who knows what he's talking about is fine (I've had one or two excellent experiences in that arena).
Essex is with UKFSN and I have no problems at all. It's a one-man-band, and he's not been to charm school, but he knows his stuff and does a good job. Entanet is the provider behind that, and they seem to have gone astray lately from what I read by others. They tried to change the contracts, and UKFSN got tough with them on his customers' behalf.
Norfolk is with PlusNet, purely because they were cheapest by far at the time and i wasn't too bothered about quality. In practice, it's been excellent. I've not seen any capping or other messing about with the ADSL - but I'm not a heavy user from here.
I think the problem is in part at the interface between BT and the ISPs. When I was having serious problems in Essex, BT blamed Pipex and Pipex blamed BT. In the end, I made a courteous but firm suggestion to both of them that they could try talking to each other. I don't know if they ever did: I gave up and moved ISP and the problems went away.
