Re: Ad Blocking Beyond the Firewall?

From: sponge (yosponge_at_yahoo.com)
Date: 06/24/03


Date: 23 Jun 2003 15:41:52 -0700

On Fri, 13 Jun 2003 17:51:23 GMT, Susan <UCE@null.invalid> wrote:

>I have two computers hooked up to a router. The router, a Belkin
model, has a
>built-in firewall that _cannot_ be turned off. Rather then run ZAP
on each
>computer the Belkin firewall seems to be doing that job just fine.
However,
>without ZAP I no longer have Ad-Blocking and Pop-Over or Pop-Under
prevention.
>IE itself does not address the ad prevention issue and I don't see
any point in
>running ZAP on each machine to provide this security.
>
>Only one machine is really active on the Internet--the other if on
has its
>network disabled or doesn't do the surfing. On the machine that does
the
>surfing I still run Ad-watch and Ad-aware but these programs seem to
be
>concerned with catching Ad software that wants to install itself in
my machine.
>
>**I'm think I am looking for a good 3rd party stand alone Cookie and
Ad Blocking
>program and wonder what the best most versatile option might be today
to do
>this??**
>
>Both boxes are XP/IE based. And in case it might be a factor I use
Agent so
>Outlook or Outlook Express (although installed) are not used or even
configured.
>
>Thank you for the advice.
>
>Susan

Use Proxomtrion 4.5. It's probably the most solid and most powerful
proxy in existence, and will block ads, pop-ups, and other more
nefarious stuff. Out-of-the-box, it's excellent, and I have some
configuration files at my site that can improve it, and there a many
others out there with great configuration files as well.
DNSKong/eDexter is great for ad- and spyware-blocking too.

I suggest running a software firewall on each machine, as no hardware
firewall has significant outbound protection. Kerio 2.1.5 is a good,
simple firewall that doesn't hog your resources, and if you want a
strong configuration file that probably won't need any customization,
use the Type 2 file from my site.

I also recommend, more than anything else, switching to another
browser and email program. For reasons far too numerous to list here
(check out SecurityFocus vulnerability database if you want details),
IE and OE are far and away the biggest security threats on any system.
Most other browsers offer easy-to-use cookie management options too,
so you don't have to get too involved with that if you don't want to.

Sponge
Sponge's Anti-Spyware Source
www.geocities.com/yosponge



Relevant Pages

  • RE: Firewalls (was Re: IDS evaluations procedures)
    ... There are a growing number Intrusion Detection/Intrusion Prevention ... > Systems that have integrated firewall. ... I can attack them. ... Where does that leave an integrated/converged security device? ...
    (Focus-IDS)
  • Re: OT: Re: Firewalling: best approach?
    ... Did not even think about the top posting on Debian lists. ... don't forget to also secure your firewall the best way you can. ... /etc/shorewall stores all the program configuration files. ... connection, and the two dmzs, kiosk and wireless out the ...
    (Debian-User)
  • [Full-Disclosure] Malware can silently open holes in SP2 Firewall
    ... this is no different than an app mucking around with other 3rd party ... personal firewall configuration files, but I have read statements that one ... must use API functions to manipulate the SP2 firewall. ... Add their own listener port to the Port Exceptions ...
    (Full-Disclosure)
  • Re: [SLE] scpm and firewall problems....
    ... On Wed, 2004-08-25 at 09:16, Erik Bågfors wrote: ... >> does not include any firewall services and firewall configuration files. ... >> That means that firewall is not covered in typical resource set. ...
    (SuSE)
  • Re: ConSeal flipping NICs
    ... NICs are prone to moving around if you add/remove NICs or change the hardware. ... We have specific rules regarding order of population of our Checkpoint firewall PCI slots in order to avoid exactly this issue. ... If you can't resolve the problem by juggling NICs between slots, or by search and replace in text configuration files, you'll just have to re-do the firewall configuration - because it's not such a 'fine FW' after all. ...
    (comp.security.firewalls)

Quantcast