Re: firewall

From: Kyle Krum [MS] (kkrum@online.microsoft.com)
Date: 02/19/03 

From: "Kyle Krum [MS]" <kkrum@online.microsoft.com>
Date: Tue, 18 Feb 2003 15:53:57 -0800

Bruce summed things up pretty well, the only thing I would change is that
the XP Firewall does in fact do SOME outbound packet checking and will not
allow outbound spoofed packets as well as some other packets with missing
information (null'ed out tcp values/etc.).

With a good virus scanner and good internet/download practices (only run
trusted software/etc.) the XP internal firewall is great. If you want to
geek out and know exactly what goes in and out of your computer and have
control over it packet by packet (and IP by IP) then look towards a 3rd
party solution.

Kyle 

--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Bruce Chambers" <bchambers@nospam.cableone.net> wrote in message
news:v534cpc99d8u30@corp.supernews.com...
> Greetings --
>
>   WinXP's built-in firewall is fine at stopping incoming attacks, and
> hiding all of your ports from probes.  It doesn't give you any alarms
> to tell you that it is working, though.  What WinXP also does not do,
> is protect you from any Trojans or spyware that you might download and
> install inadvertently.  It doesn't monitor out-going traffic at all,
> much less block (or at least ask you about) the bad or the
> questionable out-going packets.
>
>     To enable the built-in firewall, Start > Network Connections >
> Right-click the connection > Properties > Advanced > Protect my
> computer.....
>
>     ZoneAlarm or Sygate are much better, and there are a free versions
> available.  Personally, I've been very happy with Symantec's Norton
> Internet Security 2002 (NIS 2003 is now available), which includes
> Norton AntiVirus, Norton Personal Firewall, parental controls, privacy
> controls, and ad blocking.  (Just the elimination of most pop-up ads
> on the Internet made the price worth-while to me.)
>
>
> Bruce Chambers
> Microsoft MVP - Shell/User
> http://dts-l.org/goodpost.htm
> ----
> You can have peace.  Or you can have freedom.  Don't ever count on
> having both at once. -- RAH
>
>
> "Rich" <felt10@hotmail.com> wrote in message
> news:004c01c2d6dd$f4f9e710$7d02280a@TK2MSFTNGXS01...
> > I'm running XP.  For mas I got nortons firewall software.
> >
> > question is ..  will XP firewall protect to a sufficient
> > level or is Notrtons a beter option ?
> >
> >
>

Relevant Pages

  • Re: Kerio PFW 2.14 - Safe?
    ... >> down user interface. ... Then consider the fact that most packet ... If Kerio 'X' says it's stateful it most ... >> way to know for sure would be to stand between the firewall and the ...
    (comp.security.firewalls)
  • Re: Firewall questions -- what is ...?
    ... packet payload inspection. ... IDS is not a firewall and does not necessarily protect you. ... port number for a well known service and the destination port is above 1023, ... Firewalls and IDS are prone to frequent false alarms. ...
    (microsoft.public.security)
  • Re: Max iptables rules?
    ... Here is my understanding of how Iptables processes firewall rules, ... Lets say the above is our firewall with 1000 rules in it. ... The packet will be compared to the list. ... On the 3rd rule, iptables will find a match and will allow the packet, ...
    (comp.security.firewalls)
  • Re: Max iptables rules?
    ... Here is my understanding of how Iptables processes firewall rules, ... Lets say the above is our firewall with 1000 rules in it. ... The packet will be compared to the list. ... On the 3rd rule, iptables will find a match and will allow the packet, ...
    (comp.security.firewalls)
  • Re: Max iptables rules?
    ... Here is my understanding of how Iptables processes firewall rules, ... Lets say the above is our firewall with 1000 rules in it. ... The packet will be compared to the list. ... On the 3rd rule, iptables will find a match and will allow the packet, ...
    (comp.security.firewalls)