best software firewall?

Have a question or want to start a discussion? Post it! No Registration Necessary.  Now with pictures!

Threaded View


What are some recommendations for the best software firewall package?
(Hardware is the best, yes. But this is for a notebook that travels
around and there's no garauntee it will always be behind a hardware
firewall/IDS, and something is better than nothing.)

I've been directed to some software like Air-Defense which looks very
useful. And some Windows XP security tips (like turn off file sharing
and remove the Guest account, etc.)
But I'm also looking into a software package that can help too.

Norton is out. You can't pay me to use Norton.
I've had problems in the past with ZoneAlarm, and hear of problems, so
I'm leary.
What about AVG's? And Steganos'? They have trials, and they seem good,
but then, I really don't know how successful they are.
Some kind of indipendent testing and review would be great.
Any suggestions?

Thanks,
Liam


Re: best software firewall?
b__nice@hotmail.com says...
Quoted text here. Click to load it

Sound like half a dozen of one ,and six of the other to me.
me
Quoted text here. Click to load it

Re: best software firewall?


On Sat, 19 Aug 2006 18:37:35 +0100, bassbag

Quoted text here. Click to load it

Then you just don't understand the difference.

Re: best software firewall?


b__nice@hotmail.com says...
Quoted text here. Click to load it
On the contrary...i do understand the difference...i just disagree with
your understanding of it.
me

Re: best software firewall?



Quoted text here. Click to load it

Google: firewall reviews http://www.firewallguide.com/software.htm

I use Zone Alarm 5.5 as the later versions have become bloatware
[ Windows joke here ], been using ZA since @guard disappeared; but
I've heard good personal statements about Outpost and going to give
that a try.

--
http://www.pbs.org/wgbh/nova/elegant/program.html

Re: best software firewall?


On Fri, 18 Aug 2006 11:38:51 -0700, Pennywise@DerryMaine.Gov wrote:

<snip>

Quoted text here. Click to load it

Outpost is a piece of software that is so badly designed, that it
allows a restricted user to easily gain administrative rights.
http://www.securityfocus.com/bid/19024/info

This error is by design and has been there for years without Agnitum
caring to fix it.
http://www.securitytracker.com/alerts/2004/Jan/1008755.html

Sorry, but that is not a company to be trusted in terms of security. A
good look-and-feel does'nt make up for a bad engine.

Re: best software firewall?


b__nice@hotmail.com says...
Quoted text here. Click to load it
I guess you dont use windows operating systems then?
me

Re: best software firewall?


bassbag wrote:

Quoted text here. Click to load it

Windows has a good engine (hey, why do you think the NT kernel got EAL4+
and C2 security certification?) and a bad look-and-feel (configuration
issues, dangerous programs like MSIE, hard-to-trace and sometimes
surprising issues like improper ACLs on services).

Re: best software firewall?


Quoted text here. Click to load it

Because of a fake. If you're restricting NT to C2, you cannot work with
it. It's like with the original POSIX subsystem, which is now replaced
with somewhat better SFU, since Cygwin made it anyways.

Yours,
VB.
--
Viel schlimmer als die Implementation von PHP ist jedoch das Design.

                              Rudolf Polzer in de.comp.security.misc

Re: best software firewall?


Volker Birk wrote:
Quoted text here. Click to load it

IBTD. There's almost no difference from a properly secured configuration
and a C2-conformant logging, mainly in terms of extensive logging.

If you'd like to compare an existing setup against a certified C2
configuration policy, try the demo of StatsScanner.

Anyway, just having the possibility to run a C2-conformant system means
that all the security mechanisms exist and are properly implemented.

Quoted text here. Click to load it

Actually it's just the original POSIX subsystem renamed.

Quoted text here. Click to load it

ACK.

Re: best software firewall?


Quoted text here. Click to load it
Its a relevant comment in context to the posters reply...which basically
was that agnitum cant be trusted because it had security flaws in its
programming.Windows has security flaws too..hence the continued security
updates.Hence my reply.
me

Re: best software firewall?


bassbag wrote:

Quoted text here. Click to load it

But you understand the difference between random and systematic errors?

Re: best software firewall?


Quoted text here. Click to load it
No....but im sure your just aching to tell me.
me

Re: best software firewall?


bassbag wrote:
Quoted text here. Click to load it

So far many security flaws in Windows have been random errors, e.g.
program errors or misconfiguration, because people make mistakes even
with good intentions and such things cannot generally be avoided. They
can be fixed by replacing the code or reconfiguration.

Outpost has some systematic error, which was introduced by an
intentional design decision, which is absolutely avoidable and should
especially not occur for a security-relevant software. It cannot be
replaced without rewriting a major part of the relevant code, and most
likely breaks something.

Re: best software firewall?


Quoted text here. Click to load it
Thank you for that opinion.
me

Re: best software firewall?


On Sat, 19 Aug 2006 10:02:17 +0100, bassbag

Quoted text here. Click to load it

I understand your comment. There is an important difference, however.
With windows, MS's primary claim is to provide an O/S. Agnitums
primary claim is to provide security products.

Furthermore there is a difference between a bug - which can be fixed,
and a design error - which normally means rewriting.

Re: best software firewall?



Quoted text here. Click to load it


I download'd the free version, (real email address is required) now
I'm being spam'd by them...

"NOTE: This is a limited-time! You have to purchase Outpost Firewall
Pro within 48 hours of receiving this message to qualify for this
special price. This offer will not be repeated."

I'll not install it now, sticking to ZA :)

--
Time Fountain

http://www.youtube.com/watch?v=HJBBSFB4sKg


Re: best software firewall?


Liam wrote:

Quoted text here. Click to load it


I like and use ZoneAlarm


Quoted text here. Click to load it


I'm with you there.


Quoted text here. Click to load it


Your choice, of course. I have ZA on all my machines and have put on many
others too. No problems at all.

--
Ken Blake - Microsoft MVP Windows: Shell/User
Please reply to the newsgroup


Quoted text here. Click to load it



Re: best software firewall?



Ken Blake wrote:
Quoted text here. Click to load it

Thanks for the reply.
Well, my experience with ZA has been that it interferes with innocent
Web pages and creates odd problems like breaks benign javascript.
I work in the tech department of a large e-commerce site, and many of
the calls we get from people with problems on our site are running ZA.
When they shut it down, the site works fine... but we never get people
running other software firewalls calling in with these problems.

Quoted text here. Click to load it


Re: best software firewall?


<snip>
Quoted text here. Click to load it
<snip>

Perhaps these users have enabled such features as mobile code control
that can block javascript, block scripts such as vbscript, block
embedded objects like ActiveX and Java and block mime type integrated
objects.

Site Timeline