RE: [fw-wiz] Open Source Personal Firewall?

From: Petreski, Samuel (spetreski_at_highpoint.edu)
Date: 12/12/03

  • Next message: Petreski, Samuel: "RE: [fw-wiz] PIX Authentication Question"
    To: "Breno Jacinto" <breno@gamebox.net>, <firewall-wizards@honor.icsalabs.com>
    Date: Fri, 12 Dec 2003 09:23:05 -0500
    
    

    Breno,

    There was a very nice post from Paul on this list about free
    distribution firewalls. The link is

    http://www.distrowatch.com/dwres.php?resource=firewalls

    There are about a dozen firewalls. The current one that I use at home is
    IPCop found at http://www.ipcop.org and am very very pleased with it.
    This firewall not only is very easy to configure, but it has a very user
    friendly web interface with nice statistical data. It performs logging
    as well as Intrusion Detection.

    I would highly recommend this firewall to anyone. I have it currently
    running on a Pentium 200 MMX with 96MB RAM and it runs greatly.

    Samuel Petreski
    spetreski@highpoint.edu
    High Point University
    (336) 841-9290
     

    -----Original Message-----
    From: firewall-wizards-admin@honor.icsalabs.com
    [mailto:firewall-wizards-admin@honor.icsalabs.com] On Behalf Of Breno
    Jacinto
    Sent: Sunday, December 07, 2003 10:30 PM
    To: firewall-wizards@honor.icsalabs.com
    Subject: [fw-wiz] Open Source Personal Firewall?

    Hello fellows,

      I've been looking for an OSS Personal Firewall (PF) but googling for
    one
      had no results. Of course we have great options for real firewalls (pf
      is pretty decent), but I'm looking for a solution for the grandma-like
    user. Any take?

      What about the commercial ones, such as Zonealarm, BlackIce etc.. any
      good recommendations (as well as bad ones)?

      After reading the 'Personal Firewall FAQ' (www.fefe.de/pffaq), which
      is way radical; a quote:

      "You can't improve security of an untrusted system by installing
    another untrustworthy piece of software.
      You don't have the source code for the operating system or for the new
    piece of software, so it is impossible to
      verify that it does anything at all, let alone improve security. In
    the contrary, adding software increases the
      system's complexity, increasing the probabilty for undetected bugs and
    possible new security problems.

      A firewall is a computer security concept, not a piece of software.
    Vendors selling you a piece of software (or
      even a piece of hardware) under the label "firewall" are defrauding
    you."

      Is there any sense on the argument above? I mean, people barely use
      any security layer in their systems, I believe a PF would be better
      than nothing (well it could stop stupid things such as Blaster from
      happenning).

      
    cheers,
      
    // Breno Jacinto
    // breno@freeunix.com.br
    // Key fingerprint = A5C3 3B22 140D C973 6AC6 2D62 2318 B8FA 15F9 D3FC
    // Never be afraid to try something new. Remember, amateurs built the
    // ark; professionals built the Titanic. -- Anonymous

    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards
    _______________________________________________
    firewall-wizards mailing list
    firewall-wizards@honor.icsalabs.com
    http://honor.icsalabs.com/mailman/listinfo/firewall-wizards


  • Next message: Petreski, Samuel: "RE: [fw-wiz] PIX Authentication Question"

    Relevant Pages

    • [REVS] Bypassing Client Application Protection Techniques
      ... Get your security news from a reliable source. ... protection programs. ... * Kerio Personal Firewall 4.0 ... And we got actually nothing in the field of client application ...
      (Securiteam)
    • Re: Recycler security issues on IIS server
      ... > latest upates to the server. ... > like to see the server put behind our firewall, ... other software, install all patches, IISlockdown, URLscan, use the correct ... the procedures you follow may vary depending on your security needs. ...
      (microsoft.public.inetserver.iis.security)
    • Why hasnt Symantec addressed nastier Messenger spoofs
      ... Norton / Symantec has been silent on whether Norton Internet Security ... DSL firewall will stop these kinds of pop-ups. ... major ISPs and broadband systems. ...
      (comp.security.misc)
    • Re:RE : suggestions on a good firewall
      ... Subject: RE: suggestions on a good firewall ... CheckPoint does! ... with a url-filtering server. ... IT Technical Security Officer ...
      (Security-Basics)
    • Re: Service pack 2 (XP)
      ... I have a 'theory' that SP2 has a LOT to do with firewall and new browser ... besides those security features. ... The operative word is SPYWARE. ...
      (microsoft.public.windowsupdate)