Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall

From: knuj (knuj@spamgoaway.com)
Date: 06/14/02 

From: "knuj" <knuj@spamgoaway.com>
Date: Fri, 14 Jun 2002 03:54:40 GMT

Try Outpost from www.agnitum.com better than both of the ones you tested.
==========================
"John Smith" <no.spam@no.spam.fi> wrote in message
news:aeb3be$gno$1@news.cc.tut.fi...
Hi!

I checked with Windows 2000, Mozilla 1.0rc3, Internet Explorer 5.00 and
Opera 6.0 the free firewall programs ZoneAlarm 2.6.362 and Tiny Personal
Firewall 2.0.15 with http://www.pcflank.com/, which tests systems for
vulnerabilities to Internet threats with on-line tests (e.g. Stealth Test
and Browser Test).

FIREWALL TESTS

ZoneAlarm got better results than Tiny Personal Firewall with only
the Stealth Test.

With the Stealth Test ZoneAlarm stealthed (stealthed means that the
computer is invisible to others on the Internet) all the packets (TCP ping
packet, TCP NULL packet, TCP FIN packet, TCP XMAS packet, UDP packet), but
Tiny Personal Firewall only stealthed the UDP packet. With Tiny Personal
Firewall I couldn't with any settings get all the packets stealthed.

With Trojans Test both firewalls passed all the tests i.e. they stealthed.

With Advanced Port Scanner Test with "TCP connect scanning" and "Scan
typical vulnerable and Trojan ports" both passed.

With Exploits Test (a test for vulnerability to e.g. unexpected packets and
DoS attacks) both passed.

BROWSER TEST

In overall the browsers seemed to have the same "security level".

With the Browser Test all browsers passed the Cookies Check by setting each
browser to ask before accepting a cookie.

But only Opera passed the Referrer Check (with "referrer logging" turned
off). I guess the Referrer check isn't very important, because Opera's help
tells "some sites may not work properly if you turn off referrer logging."

CONCLUSION

I think I will use ZoneAlarm instead of Tiny Personal Firewall.

Relevant Pages

  • Re: Stealth is good?
    ... >> A default deny all stance ... >> isn't the same as 'stealth'. ... >> to detect that there's a firewall dropping these packets. ... >> RST packet or various ICMP codes for UDP/ICMP. ...
    (comp.security.firewalls)
  • Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... Try same tests with Kerio Firewall 2.1.4 (TPF has ... > vulnerabilities to Internet threats with on-line tests (e.g. Stealth Test ... > and Browser Test). ... > packet, TCP NULL packet, TCP FIN packet, TCP XMAS packet, UDP packet), but ...
    (comp.security.firewalls)
  • Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... Opera 6.0 the free firewall programs ZoneAlarm 2.6.362 and Tiny Personal ... vulnerabilities to Internet threats with on-line tests (e.g. Stealth Test ... packet, TCP NULL packet, TCP FIN packet, TCP XMAS packet, UDP packet), but ...
    (comp.security.firewalls)
  • Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... Opera 6.0 the free firewall programs ZoneAlarm 2.6.362 and Tiny Personal ... vulnerabilities to Internet threats with on-line tests (e.g. Stealth Test ... packet, TCP NULL packet, TCP FIN packet, TCP XMAS packet, UDP packet), but ...
    (comp.security.firewalls)
  • Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... Try same tests with Kerio Firewall 2.1.4 (TPF has ... > vulnerabilities to Internet threats with on-line tests (e.g. Stealth Test ... > and Browser Test). ... > packet, TCP NULL packet, TCP FIN packet, TCP XMAS packet, UDP packet), but ...
    (comp.security.firewalls)
Loading