First update of Win98SE questions.

I run linux at home for most stuff, but there are some sites that
require Windows-specific stuff. I'll be getting back on ADSL soon,
hopefully in the next couple of weeks. The last 6 months on dialup was
P_A_I_N_F_U_L_L after a couple of years on ADSL. On broadband, there's
quite a bit of Windows-only multimedia available.

Being the packrat that I am, I still have the original Win98SE install
CD, the manual with the key, and a second-hand 400mhz Dell with 128 megs
of RAM. After a few false starts, I solved the "CD not found" problem
and got 98SE installed. Sound and network card were found
automagically, and the 98SE box can talk to the linux box via a router.


Chicken and Egg Problem
=======================

The fresh out-of-the-box Win98SE is probably not safe to connect
directly to the net without getting several security patches first.
Microsoft's method of getting security patches requires connecting the
machine to the net... what's wrong with this picture?

My original intention was to...
- download Win98 security patches to my linux machine
- drop the dialup internet connection
- use the Windows ftp client to download the patches from the linux box

Let's just say that Microsoft seems to be extremely hostile to letting
non-MS browsers download security patches. I managed to find a few of
the patches, but I don't think it was anywhere near everything.


My Plan B
=========

The Netgear router has a telnet interface for firewall rules. I got
it blocking ports 0..1023 inbound (TCP and UDP), as well as inbound
syn-packets. I think that I can beef up security even more so that the
initial update can be done safely. I need some additional info first...

Questions, questions, questions
===============================
1) What is the domain name MS uses for running the Windows Update
program? I'll put that domain in the "trusted zone" and all other zones
will be locked down. I'll use Firefox for browsing.

2) Any recommendations for free spyware-defense and anti-virus? I do
*NOT* intend to run *ANY* form of email client on this box, so that's
one less item to worry about. I've already uninstalled Outlook Express.

--
Walter Dnes; my email address is *ALMOST* like
Delete the "z" to get my real address. If that gets blocked, follow
the instructions at the end of the 550 message.