Is SP1 requiered to Instsll SP2 for win2k?

[HJB417]

was curious, currently, I've been installing service pack1 and then 2 but I notice there's a 20mb difference in the install files and sp2 is the bigger of the 2.

 

[n0cmonkey]

I am not positive (it should say on MS's site) but I think sp1 IS required. Unless sp2 only updates a few things. Isnt sp1 like 100+ MBs?

 

[HJB417]

on my hd, 1 is about 80 and the other is 100. Was only curious becuase sp2 takes a long time to install.

 

[n0cmonkey]

<< on my hd, 1 is about 80 and the other is 100. Was only curious becuase sp2 takes a long time to install. >>



I have seen very FEW good sp installs. And MANY kernel dumps in NT

 

[Elledan]

If you install SP2, SP1 is NOT required. SP2 contains the same patches SP1 has (plus more patches, of course).

 

[Ptah]

I also thought you had to have SP1 before SP2, but when I went to install Win2k fresh this afternoon and went to Microsoft Update, SP1 wasn't even an option. All I could install was SP2.

Edit; Go to sleep, elledan.

 

[HJB417]

=)

if your into firewalls, give microsoft ISA a shot, currently a free 4 month trailware!

WHat I'm using now but unfortunately, I need to reformat a lot becuase I mess up on something (that's where the SP installs come in) but it scored a 0 in the dslreports full scan test =0

 

[n0cmonkey]

<< =)

if your into firewalls, give microsoft ISA a shot, currently a free 4 month trailware!

WHat I'm using now but unfortunately, I need to reformat a lot becuase I mess up on something (that's where the SP installs come in) but it scored a 0 in the dslreports full scan test =0 >>



I dont think I could trust MS to handle security... (I wouldnt trust checkpoint either, even on solaris). Thier track record says a lot and it isnt saying good things

 

[HJB417]

give it a shot man, seriously. my settings aren't perfect yet which usually means another fresh install. clients can access Internet and common ports, 21,80 but odd ports are a nono for now, 27000,28000 and at the same time, all the ports to my IP are showing up as stealthed. check out the dslreport scan.

run-log
(help) log 15:09:56: Fragmented scan: not requested
15:09:56: IP address: MY IP HERE =)
15:09:56: Pings-of-death: not requested
15:09:56: Testing level: standard
15:09:56: doing basic ICMP ping
15:10:10: Running tcp FULL CONNECT portscan over 1-1024 plus services (limit 3 minutes).
15:13:11: ** Last phase failed due to a sub-command timeout.
15:13:11: ** test results from this phase may not be reliable.

icmp
(help) comment if your security logs are good, you might have logged a ping.
result Your address is currently NOT pingable.

nmap-tcp
(help) comment No results from the basic TCP scan

final
(help) comment
Conclusion: FINAL SCORE: 0
** best result (I got no reaction at all from this IP)

 

[Psychoholic]

<< I dont think I could trust MS to handle security... >>


If you're referring to ISA you're mistaken. It's the latest version of Microsoft Proxy and Microsoft Firewall rolled into one. It just hit the market in early Spring and is a very well built proxy/firewall package. It has gotten nothing but good reviews and I have had no complaints with it during the time I've been using it on the LAN here.

BTW SP1 is not required for SP2. A later SP contains all previous SP's.

 

[n0cmonkey]

<<

<< I dont think I could trust MS to handle security... >>


If you're referring to ISA you're mistaken. It's the latest version of Microsoft Proxy and Microsoft Firewall rolled into one. It just hit the market in early Spring and is a very well built proxy/firewall package. It has gotten nothing but good reviews and I have had no complaints with it during the time I've been using it on the LAN here.

BTW SP1 is not required for SP2. A later SP contains all previous SP's. >>



Hrmmm.. And there is a free trial of this? Maybe I should confiscate a box at work so I can test it out. No firewall/OS is flawless, so it should be fun

 

[Psychoholic]

<< Hrmmm.. And there is a free trial of this? Maybe I should confiscate a box at work so I can test it out. No firewall/OS is flawless, so it should be fun >>


Just remember that I didn't say flawless. I just haven't found any issues that involve my installation. The proxy end is quite a bit quicker than MS Proxy 2.0.

 

[n0cmonkey]

<<

<< Hrmmm.. And there is a free trial of this? Maybe I should confiscate a box at work so I can test it out. No firewall/OS is flawless, so it should be fun >>


Just remember that I didn't say flawless. I just haven't found any issues that involve my installation. The proxy end is quite a bit quicker than MS Proxy 2.0. >>



I know, wasnt meant as a flame (I feel wierd saying that ). Ive got a win98 box here and a box that isnt booting (that may have NT on it). So I will have to see what I can find before really looking into it. Im happy with IPF for now, and PF in the future.

 

[Psychoholic]

<< (I feel wierd saying that ). >>


Aren't those warm, fuzzy feelings a bitch???

 

[n0cmonkey]

<<

<< (I feel wierd saying that ). >>


Aren't those warm, fuzzy feelings a bitch??? >>



It was more of a nausea feeling... I dont usually speak to windows users about MS programs in a good light...

 

[Maverick]

service packs always include all the fixes up to that specific date. You never need the previous ones. I remember I installed WinNT 4.0 sp4 and I didn't need any of the previous ones.

 

[HJB417]

hey hey, there's nothing wrong with windows. I'm sure if major computer manufacturers started putting easy distros of linux in their systems, linux would be more popular than it is now. The success if windows95 w/ the deals they made with all the computer makers really gave microsoft a strong foothold but their products aren't that bad. They have their share of problems but for the most part they work. Please don't mention IIS =). It will get better as time goes by. THis ISA is kinda hard to configure but I've been checking out www.isaserver.org , making it a bit easier. I haven't installed their firewall client which means I have to add these rules for every new program (tribes2, HL, etc), supposedly, having the installing their firewall client on the machine eliminates that, supposedly, I'm gonna give the client program a try and see how that goes.

You can setup stuff based on different actions. like if someone is port scanning me, I set it up to email me. you can have it do other stuff though and there are many rules to choose from or you can create your own.

From: Aiur <Aiur>
Subject: ISA Server alert: An intrusion was attempted by an external user.
Message:
ISA Server name: AIUR

ISA Server detected a well-known port scan attack from Internet Protocol (IP) address 207.33.111.34. A well-known port is any port in the range of 1-2048. For more information about this event, see ISA Server Help.

 

[n0cmonkey]

<< hey hey, there's nothing wrong with windows. I'm sure if major computer manufacturers started putting easy distros of linux in their systems, linux would be more popular than it is now. The success if windows95 w/ the deals they made with all the computer makers really gave microsoft a strong foothold but their products aren't that bad. They have their share of problems but for the most part they work. Please don't mention IIS =). It will get better as time goes by. THis ISA is kinda hard to configure but I've been checking out www.isaserver.org , making it a bit easier. I haven't installed their firewall client which means I have to add these rules for every new program (tribes2, HL, etc), supposedly, having the installing their firewall client on the machine eliminates that, supposedly, I'm gonna give the client program a try and see how that goes. >>



I personally hate MS's business practices and products (IIS being #1 ). I can see the need for MS's products for SOME things. Psychoholic and I always have these little talks or whatever. For security I personally use OpenBSD. OpenBSD has PROVEN security, and the firewall package (2.9 -stable and below), IPFilter, is a proven firewall and used by several big name vendors (for smaller sites and whatnot). The new firewalling package (PF 2.9 -current) is also considered very good by many of the people I have talked to. We will see how that goes. I am interrested in trying out this firewall. I want to see if MS has a product that will knock Checkpoint in its place.