Re: XP's Firewall

B. Nice wrote:
On Mon, 28 Aug 2006 17:22:06 GMT, Leythos <void@xxxxxxxxxxx> wrote:

In article <7276f2l9mo8r69erqpk5p9edjk7gcss7gh@xxxxxxx>, b__nice@xxxxxxxxxxx says...
On Mon, 28 Aug 2006 15:58:47 GMT, Leythos <void@xxxxxxxxxxx> wrote:

I suggest you go back to security class and get your understanding adjusted.
I suggest you stop reading my comments like the devil reads the
bible...
Lets make this simple:

1) Windows firewall allows applications to make changes to the rule sets (exceptions) without a WINDOWS OS change alert/approval by the user.

The application needs the appropriate rights to do so. I might just as
well argue that by installing or running a program with the nescessary
rights, you have already authorized it. Whether you want to be alerted
in the end comes back to personal preference.
When running as admin you should'nt expect any security product to
protect you from anything.

Windows allows applications to delete, copy or add any file without a
WINDOWS OS change alert/approval by the user.

Windows allows applications to make changes to the registry without a
WINDOWS OS change alert/approval by the user.

Windows allows applications to make changes to ........ well, I hope
you get the point.

2) Windows firewall, in any instance, on a network, unknown or know, is better than no-firewall at all.

No need to start that discussion again.

3) Firewalls that don't provide logging or real-time in/out bound traffic reporting don't allow the users to have any chance to understand what is going on with their network device.

Whether a user wants that is a matter of personal preference. And the
windows firewall does provide some logging, BTW.

With the pop-ups I have seen from numerous personal firewalls I would
really question to what extent they give a non-techie any chance to
understand what is going on with their network device.

Again, the windows firewall does what it claim it does. If you are a
techie wanting more features - you are free to install something
else. BTW, if I wanted to know what was going on with my network
device, I might consider some of the utilities from sysinternals or
DiamondCS instead of installing a third party personal firewall to
tell me.

4) Users should expect to know what is happening with their network connection, even if they don't currently understand it, they will at least have a chance to learn.

You are making the assumption that users are a homogenious mass being
very interrested in networking. Most users I know don't really care.
All they care about is being protected while doing other, to them,
more important tasks. They have close to no understanding of
networking and no intention to learn.

And again I question the ability of personal firewalls to be good ways
of understanding your networking.

5) Any firewall that lets software make changes to the rules without express permission from the user is a crappy firewall.

Any firewall running on the same machine as it is supposed to protect
is crappy to some extent.

Since the Windows Firewall is there with the operating system in XP SP 2, wouldn't this cause people to target it the most since it is on the computer by default.
.

Relevant Pages

  • Re: Remote Desktop Faster/Easier than VPC
    ... I use RDC to connect to my office PC, but for my home network I'm using ... > recently with Axure RP, which I use to prototype Web applications), I ... > The only disadvantage is that you can't run your Windows applications ... > house stereo system with the WinXP machine as the server. ...
    (microsoft.public.mac.virtualpc)
  • Re: SP2 Upgrade, Remote Desktop, and DameWare
    ... Automatic Update settings which should prevent you from having to see that ... What is also probably happening in your current situation is the Windows ... network like a single subnet of about 100 or so computers I have the ... Windows firewall is not enabled. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Remote Desktop Faster/Easier than VPC
    ... recently with Axure RP, which I use to prototype Web applications), I ... The only disadvantage is that you can't run your Windows applications ... unless you are on the network and the Windows machine is on. ... since I found myself leaving the WinXP machine on all the time to ...
    (microsoft.public.mac.virtualpc)
  • RPC Connection problems with XP Firewall, dispite proper exeptions
    ... So there seems to be a problem with DCOM or RPC over the Windows XP SP2 ... Windows Firewall: Allow local program exceptions ... If you enable this policy setting, Windows Firewall allows the computer to ... does not open TCP port 135 or 445. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Still cant connect to RWW or OWA remotely
    ... Advanced tab on both NICs. ... "Windows Firewall cannot run because another ... Windows WORKSTATION XP Pro - Domain Member ... Meridian.local Ethernet adapter Local Area Connection: ...
    (microsoft.public.windows.server.sbs)