low resource firewall

cvax · Jan 18, 2006, 03:58 AM

do you guys know of any good low resource firewall that is compatible with internet connection sharing?

currently i am using sygate but sadly it is discontinued :/

riles9262 · Jan 18, 2006, 06:22 AM

Well, it's also discontinued, but I'd take a look at Kerio 2.1.5 It's totally free, and comes with tons of options, and I love its method of logging and monitoring activity. As long as you check 'is running on an internet gateway' in the miscellaneous options your ics should also work properly through it. Oh, and it's very low resource, using 5-6mb of ram, and about 3mb of virtual memory.

Matth · Jan 18, 2006, 04:30 PM

It's discontinued, so what?

Unlike an antivirus that needs constant signature updates to be worth using, most firewalls can be run unaltered for a long time, since unless they needed fixing in the first place, it's rare that any new vulnerability appears - maybe logging of certain specific types of attack may be lacking.

If I had to set up a free firewall for a friend, right now I'd probably use my archived copy of SPF5.6 free.

Second choice, I'd probably us Kerio/Sunbelt current version, (free mode), but suggest they take advantage of the current price for full version.
http://www.sunbelt-software.com/Kerio.cfm - $14.95 - that's just MAD!

Third choice (free) I'd dig around the odd ones mentioned in alt.comp.freeware newsgroup.

Last and very much least, having just had to fix a right old foulup, and when it fouls up, it fouls up BADLY - Zonealarm.
Foulups with the Truevector/vsmon service it used are all too common, as are truly enormous logfiles - I'd have to be desperate to resort to Zonealarm, as it invariably takes the connection down permanently if something goes wrong with it - you could call it a "safety first" approach, since there's nothing safer than not being able to connect!

The one I USE though, is Outpost Pro - the free version though, is so ancient that it cannot be recommended for XP. I'd like to be able to recommend friends to try it, but I wouldn't waste their time with a 30 day trial.

Necrosis · Jan 18, 2006, 05:40 PM

I actually just bought two licenses for this firewall. You can't beat that price. Screw you Zone Alarm!!

cvax · Jan 18, 2006, 07:04 PM

hmm ill give these a try.

have you guys heard of look n stop? any suggestions about that one?

Yousaif · Jan 19, 2006, 11:45 AM

Quote:

Originally Posted by cvax

hmm ill give these a try.

have you guys heard of look n stop? any suggestions about that one?

Steer clear of that company.

PangingJr · Jan 19, 2006, 01:00 PM

Quote:

Originally Posted by cvax

have you guys heard of look n stop? any suggestions about that one?

i don't use the Look 'n' Stop any more due to one of its advanced feature do not fully support Windows XP service pack 2. i remember that the last released version of the program still require XP SP2 users to turn off the DEP. otherwish you would get a BSOD if the DEP and the advanced feature are both turned on.
i'm not sure if there is a warning about this at anywhere, but the users of this program should know about this. also, by now, they might have been issued a new drivers or a workaround which i don't know anything about it.

anyway, i used to use this firewall program for years in the past so i know about this program very well.
i've found that it is much simpler to use and also work better in many ways than many other software firewalls.
but for the new users, however, might find the program is not simple to use. and would require extra time to learn things like how to create their own rulesets, or how to configure or get the best out off the advanced features. people might just give up because of these. if you want to try this program and find some problem i'll be happy to help you.

cvax · Jan 19, 2006, 11:14 PM

pangingjr could you help me with the ruleset necessary to get ICS and STEAM working?

PangingJr · Jan 20, 2006, 07:19 AM

Hi Cvax, i hope one of these infomations will help you.

install the LnS on both computer.
create (copy/paste the below info, then save this file as ics.rie) and import these rules.
then activate the ruleset for the ICS server and Client accordingly...

Code:

[Rule0]
Statut=1
Valide=1
Direction=3
Filtrage=1
Avertir=0
Continuer=0
AlerteDlg=0
Name=ICMP: ICS Client
Description=Authorize ICS on a client PC that connectsÿþto the ICS server PC.
EthernetType=1
IPProtocol=3
EthernetAdd_PC_Criteria=0
EthernetAdd_PC0=0
EthernetAdd_PC1=0
EthernetAdd_PC2=0
EthernetAdd_PC3=0
EthernetAdd_PC4=0
EthernetAdd_PC5=0
EthernetAdd_Net_Criteria=0
EthernetAdd_Net0=0
EthernetAdd_Net1=0
EthernetAdd_Net2=0
EthernetAdd_Net3=0
EthernetAdd_Net4=0
EthernetAdd_Net5=0
IPAdd_PC_Criteria=0
IPAdd_PC_Bas0=0
IPAdd_PC_Bas1=0
IPAdd_PC_Bas2=0
IPAdd_PC_Bas3=0
IPAdd_PC_Haut0=0
IPAdd_PC_Haut1=0
IPAdd_PC_Haut2=0
IPAdd_PC_Haut3=0
IPAdd_Net_Criteria=0
IPAdd_Net_Bas0=0
IPAdd_Net_Bas1=0
IPAdd_Net_Bas2=0
IPAdd_Net_Bas3=0
IPAdd_Net_Haut0=0
IPAdd_Net_Haut1=0
IPAdd_Net_Haut2=0
IPAdd_Net_Haut3=0
IPFragmentOffset=0
IPFragmentFlags=0
TcpUdpPort_PC_Criteria=0
TcpUdpPort_PC_Bas=0
TcpUdpPort_PC_Haut=0
TcpUdpPort_Net_Criteria=0
TcpUdpPort_Net_Bas=0
TcpUdpPort_Net_Haut=0
IcmpCode_PC_Criteria=1
IcmpCode_PC=4
IcmpType_PC_Criteria=1
IcmpType_PC=3
BlockTCPServer=0
TCPFlagsVal=0
TCPFlagsMask=0

[Rule1]
Statut=1
Valide=1
Direction=3
Filtrage=1
Avertir=0
Continuer=0
AlerteDlg=0
Name=IP : ICS Server
Description=Authorize ICS on the server PC on which the ICS is installed.
EthernetType=1
IPProtocol=0
EthernetAdd_PC_Criteria=0
EthernetAdd_PC0=0
EthernetAdd_PC1=0
EthernetAdd_PC2=0
EthernetAdd_PC3=0
EthernetAdd_PC4=0
EthernetAdd_PC5=0
EthernetAdd_Net_Criteria=0
EthernetAdd_Net0=0
EthernetAdd_Net1=0
EthernetAdd_Net2=0
EthernetAdd_Net3=0
EthernetAdd_Net4=0
EthernetAdd_Net5=0
IPAdd_PC_Criteria=5
IPAdd_PC_Bas0=192
IPAdd_PC_Bas1=168
IPAdd_PC_Bas2=0
IPAdd_PC_Bas3=0
IPAdd_PC_Haut0=255
IPAdd_PC_Haut1=255
IPAdd_PC_Haut2=255
IPAdd_PC_Haut3=0
IPAdd_Net_Criteria=0
IPAdd_Net_Bas0=0
IPAdd_Net_Bas1=0
IPAdd_Net_Bas2=0
IPAdd_Net_Bas3=0
IPAdd_Net_Haut0=0
IPAdd_Net_Haut1=0
IPAdd_Net_Haut2=0
IPAdd_Net_Haut3=0
IPFragmentOffset=0
IPFragmentFlags=0
TcpUdpPort_PC_Criteria=0
TcpUdpPort_PC_Bas=0
TcpUdpPort_PC_Haut=0
TcpUdpPort_Net_Criteria=0
TcpUdpPort_Net_Bas=0
TcpUdpPort_Net_Haut=0
IcmpCode_PC_Criteria=0
IcmpCode_PC=0
IcmpType_PC_Criteria=0
IcmpType_PC=0
BlockTCPServer=0
TCPFlagsVal=0
TCPFlagsMask=0

[Nb rules]
Nb=2

Jan 18, 2006, 03:58 AM	#1
cvax zergling rush kekek Join Date: Apr 2004 Posts: 70 Rep Power: 0	low resource firewall do you guys know of any good low resource firewall that is compatible with internet connection sharing? currently i am using sygate but sadly it is discontinued :/

Jan 18, 2006, 06:22 AM	#2
riles9262 Driverheaven brewmaster Join Date: Oct 2002 Location: British Columbia, Canada Posts: 4,842 Rep Power: 72 System Specs	Well, it's also discontinued, but I'd take a look at Kerio 2.1.5 It's totally free, and comes with tons of options, and I love its method of logging and monitoring activity. As long as you check 'is running on an internet gateway' in the miscellaneous options your ics should also work properly through it. Oh, and it's very low resource, using 5-6mb of ram, and about 3mb of virtual memory. __________________ A beer a day keeps the doctor away.

Jan 18, 2006, 04:30 PM	#3
Matth Flash Banner Hater Join Date: Jun 2002 Location: UK Posts: 3,426 Rep Power: 93 System Specs	It's discontinued, so what? Unlike an antivirus that needs constant signature updates to be worth using, most firewalls can be run unaltered for a long time, since unless they needed fixing in the first place, it's rare that any new vulnerability appears - maybe logging of certain specific types of attack may be lacking. If I had to set up a free firewall for a friend, right now I'd probably use my archived copy of SPF5.6 free. Second choice, I'd probably us Kerio/Sunbelt current version, (free mode), but suggest they take advantage of the current price for full version. http://www.sunbelt-software.com/Kerio.cfm - $14.95 - that's just MAD! Third choice (free) I'd dig around the odd ones mentioned in alt.comp.freeware newsgroup. Last and very much least, having just had to fix a right old foulup, and when it fouls up, it fouls up BADLY - Zonealarm. Foulups with the Truevector/vsmon service it used are all too common, as are truly enormous logfiles - I'd have to be desperate to resort to Zonealarm, as it invariably takes the connection down permanently if something goes wrong with it - you could call it a "safety first" approach, since there's nothing safer than not being able to connect! The one I USE though, is Outpost Pro - the free version though, is so ancient that it cannot be recommended for XP. I'd like to be able to recommend friends to try it, but I wouldn't waste their time with a 30 day trial.

Jan 18, 2006, 05:40 PM	#4
Necrosis HardwareHeaven Extreme Member Join Date: May 2002 Location: Ohio Posts: 8,838 Rep Power: 131 System Specs	I actually just bought two licenses for this firewall. You can't beat that price. Screw you Zone Alarm!!

Jan 18, 2006, 07:04 PM	Thread Starter #5
cvax zergling rush kekek Join Date: Apr 2004 Posts: 70 Rep Power: 0	hmm ill give these a try. have you guys heard of look n stop? any suggestions about that one?

Jan 19, 2006, 11:14 PM	Thread Starter #8
cvax zergling rush kekek Join Date: Apr 2004 Posts: 70 Rep Power: 0	pangingjr could you help me with the ruleset necessary to get ICS and STEAM working?