LnS2.05 available

claire · Posted: Sun Apr 25, 2004 3:32 pm Post subject: LnS2.05 available

Hi all,

The official 2.05 releases are available here:
En: http://www.looknstop.com/En/LooknStop_Setup_205.exe
Fr: http://www.looknstop.com/En/LooknStop_Setup_204p2.exe

No real change compared to the 2.05b3, it is just to officialize it (expiration removal, help file updates, file versions...).

No need to uninstall the 2.05b3 first. A reboot will be required after the update.

The official 2.05 content is the following:

Features Added:
DLL Filtering (Windows 2000-XP only)
Port & IP selection for the Application Filtering
Plug-in interface for localization, rule creation and log analysis by third party applications.
Detection of troyans that are using DLL injection or DNS request through svchost/services.
Detection of non-standard protocols and drivers under Win2000/XP.
Internet Filtering: addition of a context menu to Duplicate/Cut/Copy/Paste a rule

Changes:
Signature verification improvements (Windows 2000-XP only).
New attribute in Application Filtering to have only blocking access in the log or all access.
TCP Stateful Packet Inspection: the maximum number of monitored TCP connections has been set to 128 (instead of 64).
All miscellaneous options in one list in the Advanced Options dialog box.
if the Automatic Selection is enabled for the Network Adapter, no selection occurs until the PC is considered as connected (instead of filtering by default the 1st adapter of the list)
In the "U/D #" column addition of a '-' or '+' information to know if the packet has been blocked or allowed.
In the Application Filtering, it is now possible to sort the lines by clicking on the column headers.
Addition of the 'TCP or UDP' selection to the list of protocols in the rule edition dialog box
Automatic log entries removal when reaching a limit (configurable by the user)
Application filtering: automatic removal of applications which no longer exist
Addition of GB (Giga-Bytes) unit for statistic display in the Welcome page (however there is still the 4 GB limitation)

Fixes:
Compatibility with Hyper-Threading.
In the rule edition dialog box reset of some hidden fields when the protocol has been changed (in particular TCP Flags when changing from TCP to UDP).
in some particular cases (reserved field not set to 0) the TCP Stateful Packet Inspection could reject some valid incoming connections requests
Problem in the Data display zone in the Message Content dialog box (sometime the number of displayed bytes was wrong).
in case of a quick disconnection and reconnection a new IP address was not updated in the ruleset (for rules using "equal my @")
it was possible to create a rule with a right click on log items even when the configuration was locked with a password
Under some 2003 Server configuration, the network interface wasn't correctly detected.
The field "IP to exclude for auto-detection" was sometimes badly interpreted.
The rule names in the log are now correct even if some rule have been added without applied yet.
Crash when the maximum number of Internet Filtering rules was reached.

Regards,

The Look 'n' Stop Team


	Home ˇ Topics ˇ Submit News ˇ Top 10 This entire site, Cops Themes, and Computer Cops are Š 2002 - 2004 Computer Cops, LLC. All rights reserved. You can syndicate our news using the file RSS 0.91, ultramode.txt, or RSS 1.0. Acceptable Use Policy. Use signifies your agreement. Engine Copyright Š 2002 by PHP-Nuke, GNU/GPL Licensed. ICRA Member. Paul Laudanski, Member of Computer Cops, LLC Server Load: 949 pages served in previous 5 minutes. Page Rendered: 0.446 seconds.