Re: what firewalls to use?

From: Galen (galennews_at_gmail.com)
Date: 03/16/05

  • Next message: Hotmail user: "Hotmail Sign Out Problem" 
    Date: Wed, 16 Mar 2005 04:37:10 -0500

    In news:ewhMuybKFHA.132@TK2MSFTNGP10.phx.gbl,
    Tom Pepper Willett <tompepper@mvps.org> had this to say:

     My reply is at the bottom of your sent message:

    > ;-)

    I've always been willing to throw in a monkey wrench. The post (a couple up
    from this one) requested a legit source... I had to think of one that I
    thought we all might agree was legit.

    http://www.pcworld.com/news/article/0,aid,114593,00.asp

    Or, from the site:

    "In addition, the new Windows Firewall is more powerful than the previous
    version, with both inbound and outbound scanning capabilities similar to
    those of third-party firewalls such as ZoneAlarm. For example, the first
    time an application wants to access the Internet, Windows Firewall pops up a
    dialog box in which you can configure the firewall to grant such access."

    I don't want Matt in the corner :)

    However! To be more exact!

    >From here:

    http://www.microsoft.com/technet/prodtechnol/winxppro/plan/icf.mspx

    Q: Does ICF do outbound packet inspection?

    A: Other than checking the source IP address, ICF does not do any outbound
    packet inspection.

    So, in the real world? Yes, it does do outbound packet inspection
    technically but in such a limited way that it's not worth claiming that it
    does so. I say grab a copy of Outpost and make sure to configure it properly
    or get a decent hardware firewall if you're really intent on protection.

    Galen 

    -- 
Signature changed for a moment of silence.
Rest well Alex and we'll see you on the other side.
  • Next message: Hotmail user: "Hotmail Sign Out Problem"

    Relevant Pages

    • Re: what firewalls to use?
      ... > time an application wants to access the Internet, Windows Firewall pops up ... Does ICF do outbound packet inspection? ...
      (microsoft.public.security)
    • Re: ZoneAlarm Pro, Sygate Personal Firewall, or built in xp firewall?
      ... ICF monitors outbound ports to know what inbound ports to block/open. ... blocks unsolicited connection attempts. ... connect to the Internet but would not normally purchase a firewall from the ... baseline intrusion prevention mechanism in Windows XP. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Proposed Internet Connection Firewall change in WinXP SP2
      ... Of course a firewall is totally ineffectual against unintelligent ... I would advise you to look at alternatives to DCOM based ... Microsoft MVP ... >> available for management for ICF from group policy. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: Baseline script (disable services etc.)
      ... > If anyone could give me any tips (as to turning on the ICF and disabling ... Disabling of services: ... Connection Firewall on a connection, ... Note that when using the EnableInternetFirewall/DisableInternetFirewall ...
      (microsoft.public.scripting.vbscript)
    • SBS 2003 security policy...
      ... I just discovered an amazing new feature of SBS 2003 security policy: ... computers without at least a simple firewall like the one from Microsoft ... they simply disable ICF altogether *while* its connected to the domain. ...
      (NT-Bugtraq)
    Loading