Download TrojanHunter Now
Free 30-day trial!
Latest TrojanHunter Version:
TrojanHunter 5.0
Order Now
License file delivered within minutes.
Welcome, Guest. Please Login or Register.
Nov 20th, 2008, 9:41am
   Mischel Internet Security Forum
   Internet Security
   General (Moderators: Helena, Gavin_Coe, Magnus)
   ICF & TH. Really need a "pro" Firewa		 « Previous topic | Next topic »
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print
   Author  Topic: ICF & TH. Really need a "pro" Firewa  (Read 536 times)
cheetah
Newbie
*



What is YaBB 1G - SP1!!??

   


Posts: 14
ICF & TH. Really need a "pro" Firewa
« on: Jan 4th, 2004, 12:34pm »		 Quote Quote  Modify Modify
Hello.
 
Iīve been wondering for quite som time about ICF (xp firewall) versus the "commercial" ones. The general view seems to be that ICF aint worth much. I know that ICF only blocks incoming and not outgoing, but isnīt it as good as commercial at blocking incoming? Iīve tested the firewall against various online scanners and come up "100% safe", of course i havent tried anything like Leaktest.  
 
Ok, to my point Smiley When having ICF & Trojanhunter, do you really have the need for a firewall with outgoing blocking  
capabilities? The way i see it, a program like TH takes care of the "outgoing" threats. Of course this means i have to be sure that any program i install (not containing trojans per se) isnīt malicious, like 3rd party network programs (Ftp & more) but that i can take.  
 
 
Any comments on this?
 
 
 
cheetah
IP Logged
mozar
Highly Honored Mass-Poster
*******





   


Posts: 1524
Re: ICF & TH. Really need a "pro" Fi
« Reply #1 on: Jan 4th, 2004, 12:47pm »		 Quote Quote  Modify Modify
   Hello  ,  cheetah
 
    My  FW  ,  8Signs , also  doesn't have  any  kind  of  applications  control , ie, what is installed here is considered safe by  my  FW  and  allowed to   "call home " .
    Others  8Signs' users  also  agree  that malware's detection is  a  function of AVs and ATs and we all feel  safe  this  way.
   Cheetah , take  a  look  at  the  Firewall Section  here  at  the Forum and you  can  read  some  posts  about  the issue .  
 
  Regards  ,
   mozar
 
  P.S.: I have to say  that  this  kind  of  software FWs  choice is not  preponderant among home users   and    , in some specific cases (users) , I would even advise  to  opt  for  a  FW  with  the so called  "outbound protection " .
IP Logged
maxqnz
Newbie
*




Walekam salaam, noho ora mai!

   
WWW  

Posts: 26
Re: ICF & TH. Really need a "pro" Fi
« Reply #2 on: Jan 4th, 2004, 1:03pm »		 Quote Quote  Modify Modify
I like having a firewall that does offer outbound protection, I use Sygate Pro, when I'm in Windows. it offers other useful features like dll authentication as well. Even if TH does offer adequate outbound protection, I'm one of those who favour the layered approach to security, and so I like having two app.s that offer elements of outbound protection. Most of the "Pro" F/Ws offer trial periods, so I would recommend trying them, and seeing which one fits your needs and suits your system configuration best. Maybe, after trying them, you will decide that you don't need the outbound protection they offer, but at least you will have reached that conclusion based on your own experience and judgment, the most reliable guide for your situation.   Cheesy
IP Logged
ओ पालनहारे, तुमरे बिन हमरा कौनों नहीं
What's a pieriansipist?
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2039
Re: ICF & TH. Really need a "pro" Fi
« Reply #3 on: Jan 4th, 2004, 2:15pm »		 Quote Quote  Modify Modify
Whatever program you use, consider that there is a need to for Program Verification and Control.  Which is why I use ZA Pro.
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
cheetah
Newbie
*



What is YaBB 1G - SP1!!??

   


Posts: 14
Re: ICF & TH. Really need a "pro" Fi
« Reply #4 on: Jan 4th, 2004, 8:14pm »		 Quote Quote  Modify Modify
Hello Smiley
 
 
I agree with all of you.
 
Not having application control is a little bit annoying, but to some extent one can use a program like TCPview to see what programs are listening/beeing connected. One thing that annoys me a little is that ICF is almost never mentioned. Nowadays atleast some people know they should have a firewall so they download some software firewall. For example i read a comment from a guy that had downloaded ZA, and he said something like "oh, ive had x*thousand intrusion alerts in only x months, think about if i had not had ZA!". Well, most of the alerts were probably not harmful, and if he had had ICF activated, he wouldīnt have been bothered with alerts, and incoming protection would probably have been as good! But, at the same time, he might be the person who stick with firewall and antivirus, so itīs probably good for him to have outbound protection through firewall. I might try the firewalls out there, however im very bothered when it comes to "performance hit on comp" and  beeing able to -fully- uninstall if i want (definately not talking about reinstall of xp Smiley More than once iīve read problems when it comes to uninstalling firewalls, for example with ZA and Outpost. One FW im a little interested in is Look`n Stop, weīll see when the new version comes out.  
 
Ok lastly, i put this post in "General Security" because iīd like to hear with you if there are any security measures that you take i should look into. I ran short on time in first post. This is my setup.
 
Xp-home
Panda Antivirus Titanium
Trojan Hunter 3.7
Ad-Aware
StartupMonitor (great little registry entry monitor)
ICF (xp firewall)
Modified hostsfile (routes banners etc back to comp)
TCPView  
(Dynamic IP, i like that!!)
 
I havenīt looked into IE Spyad yet, but im gonna. Im not sure if it works with Firebird though.  
 
 
 
 
thanks all, cheetah
IP Logged
maxqnz
Newbie
*




Walekam salaam, noho ora mai!

   
WWW  

Posts: 26
Re: ICF & TH. Really need a "pro" Fi
« Reply #5 on: Jan 4th, 2004, 11:19pm »		 Quote Quote  Modify Modify
In case you're interested, cheetah, here's a screenshot of SPF Pro's options tab:
http://maxqnz.com/screenshots/spfpro.jpg
IP Logged
ओ पालनहारे, तुमरे बिन हमरा कौनों नहीं
What's a pieriansipist?
cheetah
Newbie
*



What is YaBB 1G - SP1!!??

   


Posts: 14
Re: ICF & TH. Really need a "pro" Fi
« Reply #6 on: Jan 5th, 2004, 11:00am »		 Quote Quote  Modify Modify
Hmm..
 
Rereading first bit of last post i think i sounded a little bit cocky (& arrogant), definately not my intention. Two friends of mine Dl:d one of the software firewalls because supposedly it was the best. well, one then couldnīt get Kazaa to work, the other not beeing able to use VNC (remote controlling your comp). A little bit tweaking probably would have solved all.  Both were running without any firewalls last time checked. One said "it works way better without one". Well atleast use ICF, ICCCCFFFF!! Smiley  
 
Maxqnz,  
If were talking about inbound protection, do you see any significant edge over ICF? I suppose both of us are running stealth (no netbios, open ports etc), so if an potential intruder still would pick up my IP,  
would it be easier for that person to break in at my comp?  
Secondly im not familiar with *.dll authentification, i will have to look it up, is it the same as the program verification Jamming mentioned? The "spoofing" bit is about hiding where you came from? I think im going to check a couple of the Fwīs again, forum reading always gives you lot. But if ICF gives as good inbound protection, and there arenīt any major disadvantages (other than outbound) i think im going to stick with ICF. If thereīs any particular feature you like about SygateFW tell me if you like.  
 
Btw, do you recommend any other online FW scanner than grc.com?  
 
 
Thank you, cheetah
 
 
Edit : Found a lot of online scanners at computercopz.
« Last Edit: Jan 5th, 2004, 8:09pm by cheetah » IP Logged
Jamming
Stole All the Forum Stars
********




Remember when a Trojan was just for protection.

   


Gender: male
 Posts: 2039
Re: ICF & TH. Really need a "pro" Fi
« Reply #7 on: Jan 5th, 2004, 11:17am »		 Quote Quote  Modify Modify
Program Control equals executibles (exe, bat, etc....)
Component Control equals libraries and other calls (dll and the like).  
Smiley
IP Logged
Team Z Member

Servare cives, major est virtus patriae patri.
- Lucius Annaeus Seneca
I was born an American; I live an American; I shall die an American!
- Daniel Webster
cheetah
Newbie
*



What is YaBB 1G - SP1!!??

   


Posts: 14
Re: ICF & TH. Really need a "pro" Fi
« Reply #8 on: Jan 5th, 2004, 6:47pm »		 Quote Quote  Modify Modify
Ok, i got it.
 
Thanks for clearing that out Smiley
IP Logged
Pages: 1  Reply Reply  Notify of replies Notify of replies   Send Topic Send Topic   Print Print

« Previous topic | Next topic »
Search
Members
Login
Register