Blocking ports from the inside out

[palladenx 0]

Hope the subject wasn't too off. I'm looking for a solution that will block ALL outgoing and incoming SMTP (25) port activity. I tried modifying the TCP/IP filter settings under the network connection to allow only 21,80 and 443 on a Win2k box, but this only stops requests from the outside being blocked. This solution needs to be 'invisible' to the user, as well.

 

Any ideas?

[Palos 0]

Use a software firewall, like BlackIce or ZoneAlarm. Easier to use than Norton Firewall, and it places everything under stealth mode unless u allow it, basically it overcomes the 3way handshake "feature" of the TCP protocol

[palladenx 0]

Thanks all. Palos, when you mention steath mode I assume you mean the user is totally unaware of its presence (no systray icons, shortcuts, etc.) and the reason for the port block is also transparent (ie no notfication ala Norton Firewall prompt for 'rules'). Please correct me if I'm wrong.