IT. note

ISMS Audit Report CVE-1999-0524 3.3.11. ICMP timestamp response (generic-icmp-timestamp) The remote host responded to an ICMP timestamp request. The ICMP timestamp response contains the remote host's date and time. This information could theoretically be used against some systems to exploit weak time-based random number generators in other services. In addition, the versions of some operating systems can be accurately fingerprinted by analyzing their responses to invalid ICMP timestamp requests. Solution: Disable ICMP timestamp responses Disable ICMP timestamp replies for the device. If the device does not support this level of configuration, the easiest and most effective solution is to configure your firewall to block incoming and outgoing ICMP packets with ICMP types 13 (timestamp request) and 14 (timestamp response). Command(windows): netsh advfirewall firewall add rule name="Block Type 13 ICMP V4" protocol=icmpv4:13,any dir=in action=block netsh advfirewall firewall ...

        Windows Client端需有以下設定： 打開[服務] (控制台\所有控制台項目\系統管理工具) -> 啟動[WebClient]。 打開登錄檔 (開始 -> 搜尋視窗打regedit) -> [BasicAuthLevel]改為2 (HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WebClient\Parameters\BasicAuthLevel)                0 - Basic authentication disabled                1 - Basic authentication enabled for SSL shares only                2 or greater - Basic authentication enabled for SSL shares and for non-SSL shares 登入Synology的套件中心，搜尋WebDEV即可[下一步]、[下一步]安裝。 須注意HTTP及HTTPS連接埠，強烈建議使用HTTPS，因HTTP的帳密以明文傳送，若是因資安 因素使用WebDEV而使用HTTP就沒意思了。 使用Windows內建網路磁碟機連線(可先用WinSCP確認服務是否正常)。官方建議是用RaiDrive 或 Cyberduck等工具連線比較穩定。(RaiDrive測試ok，不需修改regedit) 安裝方式如下圖，主要hostname走https不可用IP。 SMB 直接執行在  TCP  上   port  445 ， 通過使用  NetBIOS  API (在全windows環境下不需此通訊協定)  TCP ports 137, 139 ( NetBIOS over TCP/IP )。 A...