Firewall Choice?

Warpy · Jun 7, 2007, 08:10 AM

I'm after a nice software firewall, anyone have any good recommendations? I'm using Windows XP SP2. It doesn't have to freeware so long as it's good?

RoyBatty · Jun 7, 2007, 08:51 AM

I could post another JPF recommendation post, but I'll just point you to the other "What is the best firewall?" threads where I already did that.

Here you go:
http://www.hardwareheaven.com/applicat...wall-best.html
http://www.hardwareheaven.com/applicat...wall-best.html (you started this one)

BlueMak · Jun 7, 2007, 09:53 AM

Sunbelt Kerio Personal Firewall, free. Or get the pro paid version which has some bonus like ad blocking etc.

Widkidone · Jun 7, 2007, 11:26 AM

Comodo Firewall Is what I would recommend

JohnDoe47 · Jun 7, 2007, 12:18 PM

Get a Router, a software firewall will only destroy your pc's desktop performance. As soon as I installed my Linksys Router, Zonealarm Pro wen't absolutely quiet, no incoming threats. A standard router will do the job but if you want that extra protection get a firewall router which you can pick up for around £40 ($80).

After I set up my router I disabled windows firewall and uninstalled Zonealarm Pro. MEGA performance improvement.

Warpy · Jun 7, 2007, 12:49 PM

I do have a DLINK 624 but I was told I needed a software firewall too, just for added protection.

JohnDoe47 · Jun 7, 2007, 01:03 PM

Quote:

Originally Posted by Warpy

I do have a DLINK 624 but I was told I needed a software firewall too, just for added protection.

no you don't mate. if you wan't that added protection just keep windows firewall on which won't eat any resources

JohnDoe47 · Jun 7, 2007, 01:24 PM

Go on Warpy, save yourself the hassle, the guy who told me about only needing a router and no software firewall has been building computers for over 20 years, my PC was even built by him in december 2003! Even he has the same router as me and has never used a software based firewall in his lifetime!

Matth · Jun 7, 2007, 06:22 PM

The router does a grand job of keeping junk like portscans out, but the router can do nothing to decide if traffic is from a wanted application, or an unwanted one.

Behind a router though, a software Hips http://wiki.castlecops.com/HIPS/IDP_programs/services may be more relevant, the process control capabilities of many firewalls being as important as their net marshalling, and an area where Windows firewall is totally useless.

Of course you can do without a firewall, you can also do without an antivirus, since behind a router and with up to date windows patches, you cannot be attacked from outside. The problem is the crap YOU might invite in, by opening an email that contains a trojan, or in software with unwanted passengers.

The watchword is "layered defence", from prudent avoidance of dangerous sites and downloads, viewing email as safe text, to the antivirus which you hope will catch a nasty if it gets through and the firewall/hips which you hope will pick up on unexpected behaviour.

As for a firewall, there is little reason to go with anything other than Comodo - it seems to tick all the boxes, and it's free - just depends if you want any of the extra features in some you can buy, such as adblocking.

JohnDoe47 · Jun 7, 2007, 07:15 PM

Quote:

Originally Posted by Matth

The router does a grand job of keeping junk like portscans out, but the router can do nothing to decide if traffic is from a wanted application, or an unwanted one.

Behind a router though, a software Hips http://wiki.castlecops.com/HIPS/IDP_programs/services may be more relevant, the process control capabilities of many firewalls being as important as their net marshalling, and an area where Windows firewall is totally useless.

Of course you can do without a firewall, you can also do without an antivirus, since behind a router and with up to date windows patches, you cannot be attacked from outside. The problem is the crap YOU might invite in, by opening an email that contains a trojan, or in software with unwanted passengers.

The watchword is "layered defence", from prudent avoidance of dangerous sites and downloads, viewing email as safe text, to the antivirus which you hope will catch a nasty if it gets through and the firewall/hips which you hope will pick up on unexpected behaviour.

As for a firewall, there is little reason to go with anything other than Comodo - it seems to tick all the boxes, and it's free - just depends if you want any of the extra features in some you can buy, such as adblocking.

granted a router can do nothing for a program that wants to connect to the internet...not good if you use non-genuine programs. as for email's avg anti-virus free editions has a built in e-mail scanner. granted it can't detect all sorts of things but anything that looks junky gets kicked by me anyways.

Your choice Warpy but Matth has some very good points. I've been running my fresh windows xp installation for 6 months based on a router and avg anti-virus free edition and I haven't detected any problems, slow-downs or crashes for that matter ^^

BWX · Jun 7, 2007, 08:12 PM

Sygate personal firewall is a great software firewall. I disabled it when I got my router though. I watch my outgoing connections with various programs though just to be safe.

Robert McClelland · Jun 10, 2007, 04:09 AM

Try Safety.net get here http://www.netveda.com/updates/?prod...sion=3.61.0002
it's free and works with ms s center also and www.avast.com virus scanner is on access real time scanning. those two never used up ram that much like anyother firewall I'd try so far.

Tipstaff · Jun 10, 2007, 12:15 PM

Just because the guy has been building computers for 20 years doesn't mean he's right, Nick. What he hasn't mentioned to you is that there are holes in hardware routers just as there is in software ones. Not as many, but they are there. Plus, not every routers built in firewall is the same.. some are crap.. some don't have one.. and some are very, very basic. Besides which there are plenty of default open ports for applications to go through in all routers. For instance port 80 (http), 443 (https), ports 110 and 25 for non secured email, 3389, 23, 1863 (MSN Messenger), plus plenty of others are always open by default, and those are open ports a trojan or piece of malware can get through.

What a software firewall allows you to do is to specifically choose to allow or disallow access to the network (be it Internet/Lan) on a per application basis. Don't want Limewire accessing the net? No prob. Just block it's ass. Sure, some routers allow you to do very similar blocking, however by default they don't, and as I said before, not every router allows you to do so. The cheaper you get, the worse the firewall, or infact, the more likely the router has no firewall at all.

In any case, do you need both a router that has a firewall (again, not all routers have a firewall) along with a software firewall? I guess it really depends on the situation. If you are doing a lot of P2P downloading, technically illiterate, or are risky in your browsing habits, then yes, you should have both. Otherwise I'd say you don't. Personally I don't use both as it get's in the way, however I'm also very cautious about where I go on the net, and I know what applications are installed. Mind you at work I do have both setup on all my machines. I have had plenty of instances where the routers firewall let something slip through (and this isn't a cheap router I'm using either), and since my work data is very, very f'ing important, it warrants being paranoid, so both a hardware and software solution is being used there.

GutterPunk · Jun 12, 2007, 03:42 PM

I like COMODO + Hardware firewall.

NAZ2222 · Jun 12, 2007, 04:21 PM

Comodo for me is the best! simple and free

H3X4D3C1M4L · Jun 19, 2007, 04:39 PM

Quote:

Originally Posted by Nick0323

Get a Router, a software firewall will only destroy your pc's desktop performance. As soon as I installed my Linksys Router, Zonealarm Pro wen't absolutely quiet, no incoming threats. A standard router will do the job but if you want that extra protection get a firewall router which you can pick up for around £40 ($80).

After I set up my router I disabled windows firewall and uninstalled Zonealarm Pro. MEGA performance improvement.

Two things wrong with this, as I see it:

1. You must have a really slow/old/poorly tuned computer if Zone Alarm killed your PC's performance. Now, ZoneAlarm's AntiSpyware/AntiVirus programs which I believe are part of the Pro suite (correct me if I'm wrong) do take a larger than normal/average hit on performance... but the only machine I actually noticed it on was my K7 600MHz... and even then, not all that much.

2. That Linksys router, or ANY router for that matter, isn't going to stop a rogue program from executing on your computer or accessing the internet (which Zone Alarm will if properly configured or just left at default settings). Look at it this way: You may have stopped receiving alerts for incoming traffic, but what if you get bit by a Trojan or other malware, and it starts downloading more virii and trojans (all too common these days)? Where's your router's firewall at that point?

Jun 7, 2007, 08:10 AM	#1
Warpy DriverHeaven Senior Member Join Date: Jun 2003 Location: USA Posts: 2,761 Rep Power: 0	Firewall Choice? I'm after a nice software firewall, anyone have any good recommendations? I'm using Windows XP SP2. It doesn't have to freeware so long as it's good? __________________ The nine most terrifying words in the English language are, "I'm from the government and I'm here to help."

Jun 7, 2007, 09:53 AM	#3
BlueMak HH's Asteroids' Dominator Join Date: Nov 2004 Location: Hellas->Macedonia->Thessaloniki Posts: 13,459 Rep Power: 349 System Specs	Sunbelt Kerio Personal Firewall, free. Or get the pro paid version which has some bonus like ad blocking etc. __________________ The people who are regarded as moral luminaries are those who forego ordinary pleasures themselves and find compensation in interfering with the pleasures of others(Bertrand Russell)"You go into Afghanistan, you got guys who slap women around for five years because they didn't wear a veil,You know, guys like that ain't got no manhood left anyway. So it's a hell of a lot of fun to shoot them." - Lt. Gen. James N. Mattis This is slavery, not to speak one's thought. [Euripides-The Phoenician Women (c.411-409 B.C.)] http://www.macedonia.info/FALLACIESANDFACTS.htm *Sic semper tyrannis.*

Jun 7, 2007, 11:26 AM	#4
Widkidone DriverHeaven Senior Member Join Date: Jun 2003 Location: San Diego, Ca Posts: 711 Rep Power: 0	Comodo Firewall Is what I would recommend __________________ Case- Cooler Master ATC-201B-BXT Aluminum Case Power Supply- Antec 480w TrueBlue480 ATX-12V MX518 Mouse CPU- AMD Athlon 64 processor 4000+ (2.4GHz) Socket-939 Motherboard-K8N Neo2 Platinum 2 GB DDR (2 pcs 1GB) PC-3200 (400) OCZ Dual Channel Platinum Hard Drive- WD 74GB 8MB 10000rpm S-ATA WD740GD Sound Card- Creative SB Audigy 2 Zs Platinum CDRW- LG GCE-8525BI 52X32X52 CD-RW OS- Microsoft Windows XP Pro Edition w/SP2 Video-Radeon X850XT AGP 256MB

Jun 7, 2007, 12:49 PM	Thread Starter #6
Warpy DriverHeaven Senior Member Join Date: Jun 2003 Location: USA Posts: 2,761 Rep Power: 0	I do have a DLINK 624 but I was told I needed a software firewall too, just for added protection. __________________ The nine most terrifying words in the English language are, "I'm from the government and I'm here to help."

Jun 7, 2007, 06:22 PM	#9
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	The router does a grand job of keeping junk like portscans out, but the router can do nothing to decide if traffic is from a wanted application, or an unwanted one. Behind a router though, a software Hips http://wiki.castlecops.com/HIPS/IDP_programs/services may be more relevant, the process control capabilities of many firewalls being as important as their net marshalling, and an area where Windows firewall is totally useless. Of course you can do without a firewall, you can also do without an antivirus, since behind a router and with up to date windows patches, you cannot be attacked from outside. The problem is the crap YOU might invite in, by opening an email that contains a trojan, or in software with unwanted passengers. The watchword is "layered defence", from prudent avoidance of dangerous sites and downloads, viewing email as safe text, to the antivirus which you hope will catch a nasty if it gets through and the firewall/hips which you hope will pick up on unexpected behaviour. As for a firewall, there is little reason to go with anything other than Comodo - it seems to tick all the boxes, and it's free - just depends if you want any of the extra features in some you can buy, such as adblocking. __________________ Mary had a little lamb, Her father shot it dead Now Mary takes her lamb to school, Between two crusts of bread

Jun 7, 2007, 08:51 AM	#2
RoyBatty HardwareHeaven Senior Member Join Date: Jun 2006 Location: Czech Republic Posts: 1,941 Rep Power: 122 System Specs	I could post another JPF recommendation post, but I'll just point you to the other "What is the best firewall?" threads where I already did that. Here you go: http://www.hardwareheaven.com/applicat...wall-best.html http://www.hardwareheaven.com/applicat...wall-best.html (you started this one)

Jun 7, 2007, 12:18 PM	#5
JohnDoe47 HardwareHeaven Addict Join Date: Dec 2006 Posts: 319 Rep Power: 0	Get a Router, a software firewall will only destroy your pc's desktop performance. As soon as I installed my Linksys Router, Zonealarm Pro wen't absolutely quiet, no incoming threats. A standard router will do the job but if you want that extra protection get a firewall router which you can pick up for around £40 ($80). After I set up my router I disabled windows firewall and uninstalled Zonealarm Pro. MEGA performance improvement.

Jun 7, 2007, 01:24 PM	#8
JohnDoe47 HardwareHeaven Addict Join Date: Dec 2006 Posts: 319 Rep Power: 0	Go on Warpy, save yourself the hassle, the guy who told me about only needing a router and no software firewall has been building computers for over 20 years, my PC was even built by him in december 2003! Even he has the same router as me and has never used a software based firewall in his lifetime!

Jun 7, 2007, 08:12 PM	#11
BWX unplugged Join Date: Nov 2002 Location: USNY Posts: 19,669 Rep Power: 110 System Specs	Sygate personal firewall is a great software firewall. I disabled it when I got my router though. I watch my outgoing connections with various programs though just to be safe. __________________

Jun 10, 2007, 04:09 AM	#12
Robert McClelland PAX Tweaker, PAX Expert. Join Date: Jun 2002 Location: Somewhere in Wood County Ohio Same Town :) Posts: 10,613 Rep Power: 196 System Specs	Try Safety.net get here http://www.netveda.com/updates/?prod...sion=3.61.0002 it's free and works with ms s center also and www.avast.com virus scanner is on access real time scanning. those two never used up ram that much like anyother firewall I'd try so far. __________________ "XTREME AUDIO IS CRAP!" "There no support for it. It's crapist card on face of the earth it should be throw into the sun" http://www.speedtest.net/result/1949536385.png

Jun 10, 2007, 12:15 PM	#13
Tipstaff HardwareHeaven Extreme Member Join Date: Jul 2002 Location: Real capital of Canada: Torauna Posts: 6,773 Rep Power: 190 System Specs	Just because the guy has been building computers for 20 years doesn't mean he's right, Nick. What he hasn't mentioned to you is that there are holes in hardware routers just as there is in software ones. Not as many, but they are there. Plus, not every routers built in firewall is the same.. some are crap.. some don't have one.. and some are very, very basic. Besides which there are plenty of default open ports for applications to go through in all routers. For instance port 80 (http), 443 (https), ports 110 and 25 for non secured email, 3389, 23, 1863 (MSN Messenger), plus plenty of others are always open by default, and those are open ports a trojan or piece of malware can get through. What a software firewall allows you to do is to specifically choose to allow or disallow access to the network (be it Internet/Lan) on a per application basis. Don't want Limewire accessing the net? No prob. Just block it's ass. Sure, some routers allow you to do very similar blocking, however by default they don't, and as I said before, not every router allows you to do so. The cheaper you get, the worse the firewall, or infact, the more likely the router has no firewall at all. In any case, do you need both a router that has a firewall (again, not all routers have a firewall) along with a software firewall? I guess it really depends on the situation. If you are doing a lot of P2P downloading, technically illiterate, or are risky in your browsing habits, then yes, you should have both. Otherwise I'd say you don't. Personally I don't use both as it get's in the way, however I'm also very cautious about where I go on the net, and I know what applications are installed. Mind you at work I do have both setup on all my machines. I have had plenty of instances where the routers firewall let something slip through (and this isn't a cheap router I'm using either), and since my work data is very, very f'ing important, it warrants being paranoid, so both a hardware and software solution is being used there. __________________ Portal: The Flash Version _________________________________ Brain: So, you sacked the cocky khaki Kicky Sack sock plucker? Mr. Sackett: The second cocky khaki Kicky Sack sock plucker I've sacked since the sixth sitting sheet slitter got sick. Last edited by Tipstaff; Jun 10, 2007 at 12:20 PM.

Jun 12, 2007, 03:42 PM	#14
GutterPunk I = Greatest Dood Join Date: Nov 2003 Location: Nebraska Posts: 5,949 Rep Power: 71	I like COMODO + Hardware firewall. __________________ Rock On \m/ Thank you Mousey for the Sig! --------------- Intel Core2Duo E6660 (3.4GHZ) ~ Tuniq Tower 120 ~ Enermax Galaxy 1000W ~ Corsair Dominator @ 1090MHZ 5-5-5-15 (OCZ XTC Modded Cooler)~ EVGA 8800GTX W/ HR-03 Plus 120MM ~ Asus DVD-RW LiteScribe ~ LG DVD-RW ~ Corsair Voyager 2GB ReadyBoost Drive ~ Vantec Nexus Fan Controller ~ ThermalTake Armor 25CM fan ~ Personal Finance Blog: Dent Your Debt

Jun 12, 2007, 04:21 PM	#15
NAZ2222 HardwareHeaven Addict Join Date: May 2005 Location: Portugal Posts: 397 Rep Power: 0 System Specs	Comodo for me is the best! simple and free __________________ Why do we fall? So that we learn how to pick our self's up.