Re: Wierd Sygate activity

From: Art Kopp (artnpeg@claymania.com)
Date: 02/21/03

  • Next message: ching chong mong: "Re: routers" 
    From: Art Kopp <artnpeg@claymania.com>
Date: Fri, 21 Feb 2003 10:53:06 GMT

    On Fri, 21 Feb 2003 10:26:11 GMT,
    see.my.sig.4.addr@nowhere.com.invalid wrote:

    >Sygate just gave me a notice that a "program has changed". It says it
    >could be I updated it, which I did, but not since I last booted and
    >Sygate didn't find it the last time I used it after I'd installed it.
    >Also, I didn't even know Sygate scanned programs other than to see if
    >they were accessing the net. What's up with this?

    I believe Sygate, like some other desktop firewalls, does a MD5 check
    on all files you've given permission. The MD5 algorithm is much better
    than a checksum. It's checking to verify that your permitted program
    hasn't been altered by a Trojan.

    Is your complaint that Sygate didn't alert you the _first_ time you
    used the program after updating it? Could it be that Sygate only runs
    the MD5 check at bootup and stores the result for later alarms? Would
    that explain what you saw? I'm just guessing :)

    Art
    http://www.epix.net/~artnpeg
    artnpeg@claymania.com

    Relevant Pages

    • Re: Sygate problem ?
      ... when I am connected I get on a regular basis ... > an alert box telling me; ... There is a discussion of the Sygate ... Sorry about the url wrap. ...
      (comp.security.firewalls)
    • Re: Free software firewalls I have never heard of before
      ... Just tried it, and it didn't alert when I started IE, nor when ... It only seems to block certain apps. ... I'm sticking with Sygate:) ... Art ...
      (alt.computer.security)
    • Re: Free software firewalls I have never heard of before
      ... Just tried it, and it didn't alert when I started IE, nor when ... It only seems to block certain apps. ... I'm sticking with Sygate:) ... Art ...
      (comp.security.firewalls)