Re: Binding Windows Services to Specific Addresses Only
Steve Friedl <[email protected]> Mon, 5 May 2008 08:55:35 -0700
| Newsgroups | gmane.comp.security.microsoft |
|---|---|
| Message-ID | <[email protected]> |
On Sun, May 04, 2008 at 01:13:17AM +0200, Christian Koerner wrote: > When it comes to Windows hardening and in specific restricting > Windows' services, the only suggestions that I've found so far are: > *) disable unnecessary services > *) restrict network access through packet filtering > > What else can be done and isn't it possible to bind Windows' services > to a specific address/interface, e.g. LAN. AFAIK, there is no general mechanism to bind services to specific interfaces or addresses - I know the Services API doesn't have any such thing. Instead, the application itself must choose to provide a mechanism for this (which is normally exposed in a GUI or registry entry). Most don't. Steve -- Stephen J Friedl | Security Consultant | UNIX Wizard | +1 714 544-6561 www.unixwiz.net | Tustin, Calif. USA | Microsoft MVP | [email protected]