[prev in list] [next in list] [prev in thread] [next in thread] 

List:       firewall-1
Subject:    Re: [FW-1] Blocking Hotbar.com
From:       Brian Lintz <BLintz () NICOR ! COM>
Date:       2002-12-31 21:25:16
[Download RAW message or body]

Actually, I answered my own question by looking at hotbar's site.. :)
 
Hotbar terms of use:
"HOTBAR COLLECTS AND STORES INFORMATION ABOUT THE WEB PAGES YOU VIEW AND THE DATA YOU \
ENTER IN SEARCH ENGINE SEARCH FIELDS WHILE USING THE SOFTWARE. HOTBAR USES THIS \
INFORMATION TO DETERMINE WHICH ADS AND BUTTONS TO DISPLAY ON YOUR HOTBAR TOOLBARS AND \
WHICH ADS TO SHOW YOUR BROWSER"  
--Brian

-----Original Message-----
From: Ham, MichaelX [mailto:michaelx.ham@INTEL.COM]
Sent: Tuesday, December 31, 2002 2:21 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Blocking Hotbar.com



 

Hotbar collects and sends all your web site requests to it's server, this includes \
intranet sites, though it's not the full sites, just the url's it is still a security \
risk.

 

-Michael

 

-----Original Message-----
From: Brian Lintz [mailto:BLintz@NICOR.COM] 
Sent: Tuesday, December 31, 2002 11:32 AM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: Re: [FW-1] Blocking Hotbar.com

 

You might need to stop this one as well... (skins.hotbar.com)

 

Name:    vip-farm2c.hotbar.com
Addresses:  66.28.234.72, 66.28.234.77
Aliases:  skins.hotbar.com

 

You should (obviously) also make sure users remove the actual hotbar toolbar from

within Internet Explorer though, otherwise you'll have all kinds of browser troubles

when hotbar can't dial home to get its updates..  (does that each time you open

the browser window..)   (note: yahoo toolbar has similar functionality.. calls home

all day long..)

 

Personally, I thought hotbar was a cool thing -- but that's a different issue \
altogether;

if you've decided to block it, you need to watch for the other hostnames the client

connects to.. :)

 

--Brian

-----Original Message-----
From: Jalen, Ken [mailto:ken.jalen@SALTRIVER.PIMA-MARICOPA.NSN.US]
Sent: Tuesday, December 31, 2002 12:56 PM
To: FW-1-MAILINGLIST@beethoven.us.checkpoint.com
Subject: [FW-1] Blocking Hotbar.com

Has anyone successfully blocked this Spyware website?  I blocked the network of \
65.121.237.0/24 and it still makes it past my FW-1

 

Ken Jalen

Network Administrator

Information Systems

Saltriver Pima-Maricopa Indian Community

10,005 E.Osborn RD

Scottsdale,AZ 85256

480-850-8053

480-850-8890 FAX

480-577-9760 (mobile)

4805779760@tmomail.net  (mobile e-mail)

ken.jalen@saltriver.pima-maricopa.nsn.us

ken.jalen@SRPMIC-nsn.gov

 


[Attachment #3 (text/html)]

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML><HEAD>
<META HTTP-EQUIV="Content-Type" CONTENT="text/html; charset=iso-8859-1">
<TITLE>Message</TITLE>

<META content="MSHTML 5.50.4728.2300" name=GENERATOR>
<STYLE>@font-face {
        font-family: Tahoma;
}
@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in 1.25in; }
P.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
        FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
        COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
        COLOR: blue; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
        COLOR: navy; FONT-FAMILY: Arial
}
DIV.Section1 {
        page: Section1
}
</STYLE>
</HEAD>
<BODY lang=EN-US vLink=blue link=blue>
<DIV><SPAN class=901432421-31122002><FONT face=Arial color=#000080 
size=2>Actually, I answered my own question by looking at hotbar's site.. 
> )</FONT></SPAN></DIV>
<DIV><SPAN class=901432421-31122002><FONT face=Arial color=#000080 
size=2></FONT></SPAN>&nbsp;</DIV>
<DIV><SPAN class=901432421-31122002><FONT face=Arial color=#000080 size=2>Hotbar 
terms of use:</FONT></SPAN></DIV>
<DIV><SPAN class=901432421-31122002><FONT face=Arial color=#000080 size=2>"<FONT 
face="Times New Roman" color=#000000 size=3>HOTBAR COLLECTS AND STORES 
INFORMATION ABOUT THE WEB PAGES YOU VIEW AND THE DATA YOU ENTER IN SEARCH ENGINE 
SEARCH FIELDS WHILE USING THE SOFTWARE. HOTBAR USES THIS INFORMATION TO 
DETERMINE WHICH ADS AND BUTTONS TO DISPLAY ON YOUR HOTBAR TOOLBARS AND WHICH ADS 
TO SHOW YOUR BROWSER"</FONT></FONT></SPAN></DIV>
<DIV><SPAN class=901432421-31122002></SPAN>&nbsp;</DIV>
<DIV><SPAN class=901432421-31122002><FONT face=Arial color=#000080 
size=2>--Brian</FONT></SPAN></DIV>
<BLOCKQUOTE dir=ltr style="MARGIN-RIGHT: 0px">
  <DIV class=OutlookMessageHeader dir=ltr align=left><FONT face=Tahoma 
  size=2>-----Original Message-----<BR><B>From:</B> Ham, MichaelX 
  [mailto:michaelx.ham@INTEL.COM]<BR><B>Sent:</B> Tuesday, December 31, 2002 
  2:21 PM<BR><B>To:</B> 
  FW-1-MAILINGLIST@beethoven.us.checkpoint.com<BR><B>Subject:</B> Re: [FW-1] 
  Blocking Hotbar.com<BR><BR></FONT></DIV>
  <DIV class=Section1>
  <P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></SPAN></FONT>&nbsp;</P>
  <P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Hotbar collects and 
  sends all your web site requests to it's server, this includes intranet sites, 
  though it's not the full sites, just the url's it is still a security 
  risk.</SPAN></FONT></P>
  <P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></SPAN></FONT>&nbsp;</P>
  <P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">-Michael</SPAN></FONT></P>
  <P class=MsoNormal><FONT face=Arial color=navy size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial"></SPAN></FONT>&nbsp;</P>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Tahoma size=2><SPAN 
  style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">-----Original 
  Message-----<BR><B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Brian 
  Lintz [mailto:BLintz@NICOR.COM] <BR><B><SPAN 
  style="FONT-WEIGHT: bold">Sent:</SPAN></B> Tuesday, December 31, 2002 11:32 
  AM<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> 
  FW-1-MAILINGLIST@beethoven.us.checkpoint.com<BR><B><SPAN 
  style="FONT-WEIGHT: bold">Subject:</SPAN></B> Re: [FW-1] Blocking 
  Hotbar.com</SPAN></FONT></P>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
  size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">You 
  might need to stop this one as well... 
  (skins.hotbar.com)</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
  size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Name:&nbsp;&nbsp;&nbsp; 
  vip-farm2c.hotbar.com<BR>Addresses:&nbsp; 66.28.234.72, 
  66.28.234.77<BR>Aliases:&nbsp; skins.hotbar.com</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
  size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">You 
  should (obviously) also make sure users remove the actual hotbar toolbar 
  from</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">within 
  Internet Explorer though, otherwise you'll have all kinds of browser 
  troubles</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">when 
  hotbar can't dial home to get its updates..&nbsp; (does that each time you 
  open</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">the 
  browser window..)&nbsp;&nbsp; (note: yahoo toolbar has similar functionality.. 
  calls home</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">all day 
  long..)</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
  size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">Personally, I thought 
  hotbar was a cool thing -- but that's a different issue 
  altogether;</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">if 
  you've decided to block it, you need to watch for the other&nbsp;hostnames the 
  client</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: Arial">connects 
  to.. :)</SPAN></FONT></P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
  size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
  <DIV>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial color=navy 
  size=2><SPAN 
  style="FONT-SIZE: 10pt; COLOR: navy; FONT-FAMILY: \
Arial">--Brian</SPAN></FONT></P></DIV>  <BLOCKQUOTE style="MARGIN-TOP: 5pt; \
MARGIN-BOTTOM: 5pt; MARGIN-RIGHT: 0in">  <P class=MsoNormal 
    style="MARGIN-BOTTOM: 12pt; MARGIN-LEFT: 0.5in; MARGIN-RIGHT: 0in"><FONT 
    face=Tahoma size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Tahoma">-----Original 
    Message-----<BR><B><SPAN style="FONT-WEIGHT: bold">From:</SPAN></B> Jalen, 
    Ken [mailto:ken.jalen@SALTRIVER.PIMA-MARICOPA.NSN.US]<BR><B><SPAN 
    style="FONT-WEIGHT: bold">Sent:</SPAN></B> Tuesday, December 31, 2002 12:56 
    PM<BR><B><SPAN style="FONT-WEIGHT: bold">To:</SPAN></B> 
    FW-1-MAILINGLIST@beethoven.us.checkpoint.com<BR><B><SPAN 
    style="FONT-WEIGHT: bold">Subject:</SPAN></B> [FW-1] Blocking 
    Hotbar.com</SPAN></FONT></P>
    <DIV>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Has anyone successfully blocked 
    this Spyware website?&nbsp; I blocked the network of 65.121.237.0/24 and it 
    still makes it past my FW-1</SPAN></FONT></P></DIV>
    <DIV>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
    size=3><SPAN style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Ken Jalen</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Network 
    Administrator</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Information 
    Systems</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Saltriver Pima-Maricopa Indian 
    Community</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">10,005 E.Osborn 
    RD</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">Scottsdale,AZ 
    85256</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">480-850-8053</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">480-850-8890 
    FAX</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial">480-577-9760 
    (mobile)</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><A 
    href="mailto:4805779760@tmomail.net">4805779760@tmomail.net</A>&nbsp; 
    (mobile e-mail)</SPAN></FONT></P>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><A 
    href="mailto:ken.jalen@saltriver.pima-maricopa.nsn.us">ken.jalen@saltriver.pima-maricopa.nsn.us</A></SPAN></FONT></P>
  <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face=Arial size=2><SPAN 
    style="FONT-SIZE: 10pt; FONT-FAMILY: Arial"><A 
    href="mailto:ken.jalen@SRPMIC-nsn.gov">ken.jalen@SRPMIC-nsn.gov</A></SPAN></FONT></P>
  <DIV>
    <P class=MsoNormal style="MARGIN-LEFT: 0.5in"><FONT face="Times New Roman" 
    size=3><SPAN 
  style="FONT-SIZE: 12pt"></SPAN></FONT>&nbsp;</P></DIV></BLOCKQUOTE></DIV></BLOCKQUOTE></BODY></HTML>



=================================================
To set vacation, Out Of Office, or away messages,
send an email to LISTSERV@lists.us.checkpoint.com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner@ts.checkpoint.com
=================================================

[prev in list] [next in list] [prev in thread] [next in thread] 

Configure | About | News | Add a list | Sponsored by KoreLogic