hi ive been reading articles and blogs about WMF exploit and have read about the sunbelt blog and about its ablility to protect against WMF exploit..so i have decided to try it currently downloading the kerio installer now..anyways, if anyone is kind enough to give me advice or some assistance on how i can properly set kerio after installation, i want to work in teh advance mode if possible..things to consider to obtain teh best security against any malicious threats ingoing...

thanks..

A good idea is to look in the overview, connections window and see which services/applications are listening on your system. Next decide which ones you may need to block. I would suggest blocking the following ports (inbound):-

135 (epmap), 137-138 (netbios-ns/dgm), 139 (netbios-ssn) and 445 (microsoft-ds).

Also, make your system non-pingable by setting up some icmp rules.

when i installed kerio, i mistakenly chose to use basic mode instead of teh advance..tried to reinstalled it to set in advance mode but still turned out as basic mode..

anyway, how can i perform your suggestions in teh basic mode??

Sounds like you may have re-installed over an existing config (within SKPF4's folder). To change into Advanced Mode, just change all the deny's (in the application window) to ask. You may need to check some of the other settings in the other modules too. I think Sunbelt supply a utility on their site that allows you to do this.

i see..thanks..just made some rules with kerio firewall so other users wont have to get confused or annoyed by popups..

anyways, how do i make the pc non-pingable and block those ports in tah basic mode..??

thanks for teh link..just what i needed but had to replace kerio firewall coz it has caused several system crash..mostly while sufring teh net, shuts explorer down and htere's this memory dump something that counts 1 till 100 then reboots and then at startup a dialog box from kerio about generated error and creating and uploadign report to sunbelt...i dunt know if its really kerio related, sometimes even tends to delay windows startup ..i went back to using zonealarm..i really like teh kerio fiewall coz of its impressive function but unless i get ideas on how to fix this matter, i'll be using othe firewall for now..