Re: Avast or Zone Alarm using proxy server?

From: ROBERT S AMP BA Drake (robtsdrake_at_verizon.net)
Date: 02/21/05 

Date: Mon, 21 Feb 2005 13:53:21 GMT

I'll add that a firewall doesn't totally protect you - raises the bar a
little higher and makes it harder for the perpetrator.

"Gerald Vogt" <vogt@spamcop.net> wrote in message
news:420fe194$0$975$44c9b20d@news2.asahi-net.or.jp...
> Lars-Erik Østerud wrote:
>> Uhu. ZA protects outgoing traffic from programs as well (you get a
>> notice about all new programs trying to talk to the net and can block
>> them). Windows FW only blocks incoming and server (listen) programs.
>
> What else do you need? Do you rely on the outgoing filtering? It is
> extremely easy to circumvent the outgoing "filter" and there are many
> examples how to do it. If you catch some Spyware on your computer it may
> send data out and your PFW won't notice. (e.g. your browser is probably
> enabled to send data out and any software running locally can use IE to
> send data out...) I would not call this "protection": most of the software
> you use that wants to send data out you will enable anyway, because it
> needs the internet (e-mail, browser, etc.) while that software that you
> really want to block out (spyware etc.) can easily circumvent it. There is
> no real benefit in that.
>
> And if you rely on it, i.e. you say "I've installed that PFW thus nobody
> can spy me out. I can install any program on my computer I want. I am safe
> anyway." There are many examples posted in various newsgroups with people
> that installed virus scanner, PFW, spyware scanner and more to be safe and
> still "catched" something because they thought with all that security
> software nothing would happen. They just don't get it that the biggest
> security problem they have is themselves.
>
> So there is group A that downloads the craziest stuff from the weirdest
> places. Those people live dangerous and no PFW or other security software
> can help them in the end. Just think about all those pop-ups of the PFW
> that ask you whether you want to allow this or that. Do you always know
> the correct answer?
>
> And group B does not download things. They just want browse their local
> newspaper, send some e-mails, use some word processor. They are careful
> and they don't open spam and in particular don't open documents promising
> anything with strange attachments. Someone told them and they know that
> and they are careful. For them, a PFW may be nice as it tells them when
> Word tries to connect to the microsoft server. But then, you wanted Word
> and you want the clip art, so you allow it anyway. You don't need a
> difficult pop-up question for that. No need here for an outgoing filter,
> either.
>
> So the outgoing filter does not work 100%. Either you rely on it and play
> it dangerous and loose eventually (all those other things blocked like the
> automatic update from some legal software giving you the false impressions
> it that it works perfectly) or you don't rely on it and be careful. But
> then, you don't rely on it anyway so why do you need it? The SP2 FW is
> perfect as incoming filter and cannot be as easily turned off as a PFW
> from some software running on your system. (Whatever you can do on your
> system any software that you run can do as well, it just "simulates" a
> couple of mouse clicks and before you can see it your PFW is turned off
> from its tray icon). You don't even need the SP2 firewall if you do not
> install strange software and shut down all those "nice" services that
> Windows usually starts but that you never need or configure them that they
> do not listen to the internet interface...
>
> Gerald
>
>

Relevant Pages

  • Re: Avast or Zone Alarm using proxy server?
    ... I'll add that a firewall doesn't totally protect you - raises the bar a ... > send data out and your PFW won't notice. ... > So the outgoing filter does not work 100%. ... You don't even need the SP2 firewall if you do not ...
    (alt.computer.security)
  • Re: Avast or Zone Alarm using proxy server?
    ... I'll add that a firewall doesn't totally protect you - raises the bar a ... > send data out and your PFW won't notice. ... > So the outgoing filter does not work 100%. ... You don't even need the SP2 firewall if you do not ...
    (comp.security.misc)
  • Re: Can I protect myself against network attacks?
    ... > can peacefully coexist with a PFW. ... > because there are effects from the attack; ... after it disabled the firewall. ... listening and the IP stack would just drop packets for any port. ...
    (comp.security.firewalls)
  • Re: Can I protect myself against network attacks?
    ... I consider the SP2 PFW "half a firewall", and many I've read say it ... or listening in, and no virus or trojans from a system scan via KAV. ... After all, the attacks did ...
    (comp.security.firewalls)
  • Re: Why you should use a firewall on Win98
    ... > filtering firewall or indeed any firewall, ... If you like the outbound firewall you can use it. ... With a PFW it's all there and nobody ... message the warning that there is a phising e-mail in my Trashbin once ...
    (comp.security.firewalls)
Loading