Win2003 system to build a security line? Then enable built-in ICF

Security software has become a necessary protection tool for Internet users. However, how to choose a security product that is worry-free and safe to use has become a concern of everyone. But on Windows Server 2003, you don't have to worry about this problem, because the system's own firewall tool allows you to keep your system in the market without having to purchase expensive hardware firewalls or complex professional firewall software. Relatively safer, this is undoubtedly very suitable for newcomers and home users.

First, enable ICF

By default, ICF is not enabled, we need to enable it manually. For example, if we want to enable the ICF of "local connection", the steps are as follows:

Step 1: Right click on the "Network Neighborhood" icon, execute the "Properties" command, double click "“Local Connection" ;, then click on <;Properties  to enter the “Local Connection Properties” dialog.

Step 2: Click the “Advanced” button to switch to the “Advanced" tab, check “protect my computer and network by restricting or blocking access to this computer from the Internet&rdquo ;Options, click “OK", this will open ICF.

Second, security settings for ICF

If you do not make any settings after enabling ICF, all ports of the server will be disabled and the corresponding services will be stopped. Therefore, we need to make the necessary settings for ICF to meet our actual needs.

1. Setting up regular services

The regular services mentioned here refer to WWW, FTP and other services that we often use. ICF provides several common services for us to set by default. Click the “Settings“ button in the “Advanced” tab to enter the “Advanced Settings” dialog. In the "Services" tab, a list of commonly used services is provided. If our server needs to provide FTP services, then only check the "Ftp Server" option (Figure 1), in the "Service Settings" that are turned on. ” Keep the default computer name in the dialog box.
Figure 1Ftp server

2. Setting up non-routine services

In order to prevent users from bad access, we often need to mask some default ports of regular services, and use some non-default ports. Provide regular services. For example, we can use the 6000 port to provide WWW services. Click the “Add” button in Figure 1 to open the “Service Settings” dialog. Add the appropriate information in the dialog box. Be sure to add “6000” (Figure 2) to the external and internal port numbers, then click the “OK” button. You can now see the service you just added in the list of services. Previous12Next page Total 2 pages