flat assembler
Message board for the users of flat assembler.

Index > Heap > how to prevent CHM file accessing internet content?

Author
Thread Post new topic Reply to topic
sleepsleep



Joined: 05 Oct 2006
Posts: 8969
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
idk if you guys got solution to such annoyance & privacy problem,

some CHM file after open will try to access content, pictures, logo, etc from the internet,

is there any method to block network, internet access from those CHM files?

CHM = microsoft compiled HTML help file.
Post 18 May 2012, 05:15
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17345
Location: In your JS exploiting you and your system
revolution
Use a firewall.
Post 18 May 2012, 05:23
View user's profile Send private message Visit poster's website Reply with quote
sleepsleep



Joined: 05 Oct 2006
Posts: 8969
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
Sad
Windows XP and Windows Server 2003 do not support outbound filtering.
hate to run another software inside my lappy.

got to check if any opensource lite version firewall.
Post 18 May 2012, 05:29
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17345
Location: In your JS exploiting you and your system
revolution
sleepsleep wrote:
Windows XP and Windows Server 2003 do not support outbound filtering.
Yes. It is probably because of some lawsuit from firewall sellers. Note that the very first version of the firewall MS put in XP did support outbound filtering. They removed this funtionality in later "upgrades".
Post 18 May 2012, 05:37
View user's profile Send private message Visit poster's website Reply with quote
sleepsleep



Joined: 05 Oct 2006
Posts: 8969
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
ic,
thanks for the info,

never know the first version support outbound filtering. cool!
Post 18 May 2012, 05:48
View user's profile Send private message Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
COMODO Firewall. Thee best Smile
Post 18 May 2012, 08:01
View user's profile Send private message Reply with quote
sleepsleep



Joined: 05 Oct 2006
Posts: 8969
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
yeah, comodo the best Smile their AV also very powerful!
i think i happened to install it on one of my client pc, block everything by default, awesome
Post 18 May 2012, 10:18
View user's profile Send private message Reply with quote
LocoDelAssembly
Your code has a bug


Joined: 06 May 2005
Posts: 4633
Location: Argentina
LocoDelAssembly
Guys, are you sure outbound filtering is gone in XP? I just checked on Windows7 and it is there (even as a per app filter). Maybe later WinXP SPs moved the feature somewhere else?
Post 18 May 2012, 13:45
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17345
Location: In your JS exploiting you and your system
revolution
LocoDelAssembly wrote:
... are you sure outbound filtering is gone in XP?
Yes
Windows XP and Windows Server 2003 do not support outbound filtering
Post 18 May 2012, 14:20
View user's profile Send private message Visit poster's website Reply with quote
LocoDelAssembly
Your code has a bug


Joined: 06 May 2005
Posts: 4633
Location: Argentina
LocoDelAssembly
I see, but then the firewall sellers lawsuit theory still holds?
Post 18 May 2012, 15:50
View user's profile Send private message Reply with quote
typedef



Joined: 25 Jul 2010
Posts: 2913
Location: 0x77760000
typedef
Or you can make a network filter driver. (NDIS Filter) that will just block specific apps.

Start here if interested. http://msdn.microsoft.com/en-us/library/windows/hardware/ff556030(v=vs.85).aspx
Post 18 May 2012, 20:41
View user's profile Send private message Reply with quote
sleepsleep



Joined: 05 Oct 2006
Posts: 8969
Location: ˛                             ⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣⁣Posts: 334455
sleepsleep
interesting Smile but idk much about ndis filter,, will take time in future, hopefully code one that block all hh.exe :p
Post 19 May 2012, 07:19
View user's profile Send private message Reply with quote
revolution
When all else fails, read the source


Joined: 24 Aug 2004
Posts: 17345
Location: In your JS exploiting you and your system
revolution
LocoDelAssembly wrote:
I see, but then the firewall sellers lawsuit theory still holds?
Maybe not. But I can't imagine any other reason for removing the "bug".
Post 19 May 2012, 07:57
View user's profile Send private message Visit poster's website Reply with quote
Display posts from previous:
Post new topic Reply to topic

Jump to:  


< Last Thread | Next Thread >
Forum Rules:
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum


Copyright © 1999-2020, Tomasz Grysztar. Also on YouTube, Twitter.

Website powered by rwasa.