OT: Anyone know a good firewall?

"Tony Raven" <[email hidden]> wrote in message
news:[email hidden]...

Quoted message said:

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

Zone alarm free edition. Mine just sits there working - no attempt to trick
me into paying for it.

Then of course there's the firewall in the broadband router..

cheers,
clive

Hi Tony,

You could give Sygate a try, there is a 30day free trial before you
buy. I use it with AVG antivirus and it seems to work well.
There is Mcaffee asd well which is similar to Norton, which I dont
like!

-Tom

Hi Tony,

You could give Sygate a try, there is a 30day free trial before you
buy. I use it with AVG antivirus and it seems to work well.
There is Mcaffee asd well which is similar to Norton, which I dont
like!

-Tom

On Fri, 22 Apr 2005 16:26:39 +0100, Tony Raven <[email hidden]>

Quoted message said:

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

I've got a copy of AtGuard (build 11) hanging around on my hard disc
at home. Free, nice interface, no longer available. {R}ichard Ashton
_used_ to have a downloadable copy on his semolina.org website but I
think that's busted.

I can email you a copy if you can't find it on the web.

Tim

Clive George said:

Zone alarm free edition. Mine just sits there working - no attempt to trick
me into paying for it.

That's not my experience. It kept telling me there was an upgrade
available, the upgrade always being the paid for version. We run it on
the computer at home and I then had to go through the process of
uninstalling the limited time paid for version and reinstalling the free
version after my daughter clicked the Upgrade Now invitation.

Quoted message said:

Then of course there's the firewall in the broadband router..

That's fine but I am using a laptop that connects in many many ways
other than my home network - WiFi, 3G, work network.....

Tony

Tony Raven said:

Clive George said:

Zone alarm free edition. Mine just sits there working - no attempt to trick
me into paying for it.

That's not my experience. It kept telling me there was an upgrade
available, the upgrade always being the paid for version. We run it on
the computer at home and I then had to go through the process of
uninstalling the limited time paid for version and reinstalling the free
version after my daughter clicked the Upgrade Now invitation.

Quoted message said:

Then of course there's the firewall in the broadband router..

That's fine but I am using a laptop that connects in many many ways
other than my home network - WiFi, 3G, work network.....

Thats where I rely on 1. running a mac, 2. the work firewall/NAT system when
at work and 3. the Linux box that acts as a firewall/ bridge between teh
internal home network and the broadband connection. The wireless and cable
connectivity is inside the firewall.

...d

Tony Raven said:

Today I have finally reached the end of my tether with a product
called Kerio Firewall which came as a package with AVG antivirus. It
randomly suddenly decides that no programmes should have access to
the internet and starts requesting access permissions for IP
addresses whenever you try to do anything. Today it was triggered by
a Google search and now decides the e-mail and news servers cannot be
accessed without explicit permission given each time. I tried the
support address on their website but all I got was a support engineer
who refused to help but rudely argued about me using the wrong e-mail
address to request support (the fact that it was the support address
published on their website was not relevant as far as he was
concerned). It can't even update without being manually disabled so
it can access its own update servers!

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

Tony

I use Free AVG and Free Zone Alarm- neither try to make me upgrade to paid
versions.
Also use Free Roboform filler, that does try to make me upgrade to paid
version!!
BTW If you haven't already got it, try "Spybot", also free

Jan

Tony Raven said:

Today I have finally reached the end of my tether with a product called
Kerio Firewall which came as a package with AVG antivirus. It randomly
suddenly decides that no programmes should have access to the internet
and starts requesting access permissions for IP addresses whenever you
try to do anything. Today it was triggered by a Google search and now
decides the e-mail and news servers cannot be accessed without explicit
permission given each time. I tried the support address on their
website but all I got was a support engineer who refused to help but
rudely argued about me using the wrong e-mail address to request support
(the fact that it was the support address published on their website was
not relevant as far as he was concerned). It can't even update without
being manually disabled so it can access its own update servers!

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

Tony

I'm using AVG Free (excellent) and Agnitum OutPost Free (good).
The free version of Outpost is getting a bit 'old' but it still does a
very good job

"Tim Hall" <[email hidden]> wrote in message
news:[email hidden]...

Quoted message said:

On Fri, 22 Apr 2005 16:26:39 +0100, Tony Raven <[email hidden]>

Quoted message said:

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

I've got a copy of AtGuard (build 11) hanging around on my hard disc
at home. Free, nice interface, no longer available. {R}ichard Ashton
_used_ to have a downloadable copy on his semolina.org website but I
think that's busted.

I can email you a copy if you can't find it on the web.

Atguard 3.22 is/was available...

Tony Raven said:

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free

Quoted message said:

version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I

can

Quoted message said:

dump this POS where it belongs?

Try avast ........... I think it is the dogs dangy bits !!

www.avast.com

Ah Ha Firewall ......... I posted ref AntiVirus, I really MUST get new
glasses 8-)

Today I have finally reached the end of my tether with a product called
Kerio Firewall which came as a package with AVG antivirus. It randomly
suddenly decides that no programmes should have access to the internet
and starts requesting access permissions for IP addresses whenever you
try to do anything. Today it was triggered by a Google search and now
decides the e-mail and news servers cannot be accessed without explicit
permission given each time. I tried the support address on their
website but all I got was a support engineer who refused to help but
rudely argued about me using the wrong e-mail address to request
support
(the fact that it was the support address published on their website
was
not relevant as far as he was concerned). It can't even update without
being manually disabled so it can access its own update servers!

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

Tony

Stop using 'internet explorer' and start using Mozilla or another
browser. I have been using ' Mozilla Firefoxe' for a few months even
though I still have 'Zone Alarm'.......'Pest Patrol' ..........'Adaware
6.......Norton Internet Security........ and others.

All of them have become pretty much redundant even though I still use
Hotmail. I have switched them all off to see what 'gets through' and
the 'cookie controller' seems to do its job very well. I would'nt say
that my computer is completely hack-free but the problems have almost
completely dissapeared since I stopped using 'Internet Explorer'.

Sean.

<[email hidden]> wrote in message
news:[email hidden]...

Quoted message said:

Stop using 'internet explorer' and start using Mozilla or another
browser. I have been using ' Mozilla Firefoxe' for a few months even
though I still have 'Zone Alarm'.......'Pest Patrol' ..........'Adaware
6.......Norton Internet Security........ and others.

All of them have become pretty much redundant even though I still use
Hotmail. I have switched them all off to see what 'gets through' and
the 'cookie controller' seems to do its job very well. I would'nt say
that my computer is completely hack-free but the problems have almost
completely dissapeared since I stopped using 'Internet Explorer'.

I went a slightly different route - my only protection on the PC is a
firewall. No AV, adaware or anything like that, and I use IE and OE.

(ISP filters for viruses, but I don't suffer from them anyway due to having
IE/OE configured correctly).

I would say the firewall was pretty much essential though unless you're
hiding behind a NAT arrangement. Especially if you ever make your machine
into a local server of any description.

cheers,
clive

in message <[email hidden]>, Tony Raven

(') said:

Today I have finally reached the end of my tether with a product
called
Kerio Firewall which came as a package with AVG antivirus. It
randomly suddenly decides that no programmes should have access to the
internet and starts requesting access permissions for IP addresses
whenever you
try to do anything. Today it was triggered by a Google search and now
decides the e-mail and news servers cannot be accessed without
explicit
permission given each time. I tried the support address on their
website but all I got was a support engineer who refused to help but
rudely argued about me using the wrong e-mail address to request
support (the fact that it was the support address published on their
website was
not relevant as far as he was concerned). It can't even update
without being manually disabled so it can access its own update
servers!

So I don't want to use Norton (BTDTGTTS), I don't like ZoneAlarm free
version because its always trying to trick you into the paid for
version. So what good freeware firewalls are there out there so I can
dump this POS where it belongs?

Stick an old PC between you and the Internet, run Smoothwall on it.
<URL:http://www.smoothwall.org/>

You can never really safely run the firewall on the same physical
machine that it's protecting. Indeed the ideal network topology now is
probably to have your 802.11 hub on a separate protected subnet from
your internal machines, so that even for a domestic network you have
two, not one, protected subnets. Because security on the 802.11 hub is
never going to be as good as security on physical wire.

--
[email hidden] (Simon Brooke) http://www.jasmine.org.uk/~simon/
;; Skill without imagination is craftsmanship and gives us
;; many useful objects such as wickerwork picnic baskets.
;; Imagination without skill gives us modern art.
;; Tom Stoppard, Artist Descending A Staircase

<[email hidden]> wrote in message
news:[email hidden]...

Quoted message said:

Hi Tony,

You could give Sygate a try, there is a 30day free trial before you
buy. I use it with AVG antivirus and it seems to work well.
There is Mcaffee asd well which is similar to Norton, which I dont
like!

I'm quite happily running Sygate Personal Firewall, which is freeware,
having ditched Zone Alarm.
Have a look at http://www.snapfiles.com/freeware/security/fwfirewall.html
for a selection of programs.

On 22/4/05 8:13 pm, in article
[email hidden], "Simon Brooke"

Quoted message said:

Stick an old PC between you and the Internet, run Smoothwall on it.
<URL:http://www.smoothwall.org/>

Quoted message said:

You can never really safely run the firewall on the same physical
machine that it's protecting. Indeed the ideal network topology now is
probably to have your 802.11 hub on a separate protected subnet from
your internal machines, so that even for a domestic network you have
two, not one, protected subnets. Because security on the 802.11 hub is
never going to be as good as security on physical wire.

Well, in principle there is no such thing as a truly secure network. We have
seen a huge number of dictionary attacks against SSH (my home machine got
penetrated that way). So now we have no passwords on the external facing
SSH, requiring keypairs for access.

With a suitable packet filter a single machine can be made appropriately
safe for domestic use. Doing that on Windows is beyond my ken though..

...d

Quoted message said:

Stop using 'internet explorer' and start using Mozilla or another
browser.

Learn to read headers and you might learn something.

Tony

Simon Brooke said:

Stick an old PC between you and the Internet, run Smoothwall on it.
<URL:http://www.smoothwall.org/>

Do I have to lug the old PC down to Starbucks along with my laptop?

Tony

in message <[email hidden]>, David Martin

(') said:

On 22/4/05 8:13 pm, in article
[email hidden], "Simon Brooke"

Quoted message said:

Stick an old PC between you and the Internet, run Smoothwall on it.
<URL:http://www.smoothwall.org/>

Quoted message said:

You can never really safely run the firewall on the same physical
machine that it's protecting. Indeed the ideal network topology now
is probably to have your 802.11 hub on a separate protected subnet
from your internal machines, so that even for a domestic network you
have two, not one, protected subnets. Because security on the 802.11
hub is never going to be as good as security on physical wire.

Well, in principle there is no such thing as a truly secure network.
We have seen a huge number of dictionary attacks against SSH (my home
machine got penetrated that way). So now we have no passwords on the
external facing SSH, requiring keypairs for access.

We now have no external facing SSH. Indeed, our firewall now exposes no
ports at all:

-[root]-> nmap perimeter.jasmine.org.uk

Starting nmap 3.75 ( http://www.insecure.org/nmap/ ) at 2005-04-22 22:39
BST
All 1663 scanned ports on perimeter.jasmine.org.uk (62.6.156.73) are:
closed

If you want to do something on the servers that you can't do over HTTP
or FTP, you do it on the console and nowhere else. Mind you, I suppose
we're a little unconventional in having five public servers in the
house.

--
[email hidden] (Simon Brooke) http://www.jasmine.org.uk/~simon/
Just as defying the law of gravity through building aircraft requires
careful design and a lot of effort, so too does defying laws of
economics. It seems to be a deeply ingrained aspect of humanity to
forever strive to improve things, so unquestioning acceptance of a
free market system seems to me to be unnatural. ;; Charles Bryant