sygate 5.5 free not active ?

Suggest uninstall and reinstall. (save your advanced rules and put them back in) Casey

Sygate has a big design flaw as a "Personal Firewall" - its system services are opening windows. This is a security breach, because this opens additional attack vectors, your system does not have with the Windows-Firewall instead.

Yours, VB.

mesnews quota Casey Klc che mercoledì, 18/01/2006, 18.40.07 scrisse :

I already did it tree times before I wrote

I don't have advance rules

I don't understand

at home where the sygate is perfect exceed the

windows-xp-firewall doesn't block the outdoor calls but only those indoor

I'm not sure that windows-xp-firewall is a complete firewall but I'm not a specialist ... I try to be security-protected

Which a bit user-friendly personal firewall do you suggest ? Which a bit user-friendly personal firewall free do you suggest ?

Yes. A fairy tale, that "blocking outbound" will help.

No one. I'd suggest not offering services to the Internet, see:

Yours, VB.

mesnews quota Volker Birk che mercoledì, 18/01/2006, 21.53.59 scrisse :

I lost !

sorry but does it block or not block outbound ?

I lost more !

It tries. And it fails.

Yours, VB.

X-No-Archive: Yes mesnews quota K®54 che mercoledì, 18/01/2006, 15.04.04 scrisse :

I tried with

Are you referring to operating system services not being controlled by Sygate firewall. Casey

No. Sygate installs a system service (runs with elevated privileges, so it can do all the filtering stuff). Contradictory to the MS guidelines this service has windows attached to it (for the configuration UI). These windows make the service susceptible to shatter attacks.

cu

mesnews quota Ansgar -59cobalt- Wiechers che giovedì,

ok another firewall without this system service ?!??!?!!?

Can you recommend a software firewall that doesn't have this design flaw? Thank you, Casey

According to Sygate Firewall Forum

Sygate Personal Firewall Pro v5.5 build 2507 beta.

Casey

The Windows-Firewall if you must have a personal firewall. Personally I perfer to simply disable the services I don't need and/or put the computer behind a filtering router.

cu

The service is susceptible to this kind of attacks as long as it remains interactive (i.e. has windows attached to it). That was still the case when I evaluated Sygate 5.5 in early January 2005. Sygate probably patched the vulnerabilty to the originally reported shatter attack (using WM_TIMER messages), but they obviously did not fix the underlying problem. A solution to this problem would have been to run the service non-interactive and run a client program with the user's privileges as configuration frontend (using e.g. TCP/IP or named pipes as communication channel between them).

cu

I wonder if you're dealing w/ a driver conflict.

I found this behaviour with Sygate not starting from boot for many minutes with Sygate personal 5.6 after installing new drivers for my ATI 9600 video card.

When I reverted to older ATI drivers, no problem w/ Sygate.

After clean XP install, I switched to Kerio.

___________________________________ SemiPelagian SHIFT-2 gmail STOP com you may do the obvious to reply

Thanks to another poster, "J". Please read the links below.

Ansgar -59cobalt- Wiechers wrote in news: snipped-for-privacy@individual.net:

Try doing that last part on dialup, bub. Hint: Not every Internaut uses cable/dsl/other high speed connection...

X-No-Archive: Yes mesnews quota Ansgar -59cobalt- Wiechers che venerdì,

again windows xp firewall ? :'(

at home I have an adsl_modem but I didn't think to need a router to mascherate ip and other things (I don't know what router does I'm a bit newbie in security, I try to understand something following security_newsgriop)

but I always think that it's important block every outbound call not request

on the italian_newsgroup of security I've never read that there is the ''Sygate design flaw''

and zone alarm free ? :-?