Go Back   AnandTech Forums > Software > Software for Windows

Forums
· Hardware and Technology
· CPUs and Overclocking
· Motherboards
· Video Cards and Graphics
· Memory and Storage
· Power Supplies
· Cases & Cooling
· SFF, Notebooks, Pre-Built/Barebones PCs
· Networking
· Peripherals
· General Hardware
· Highly Technical
· Computer Help
· Home Theater PCs
· Consumer Electronics
· Digital and Video Cameras
· Mobile Devices & Gadgets
· Audio/Video & Home Theater
· Software
· Software for Windows
· All Things Apple
· *nix Software
· Operating Systems
· Programming
· PC Gaming
· Console Gaming
· Distributed Computing
· Security
· Social
· Off Topic
· Politics and News
· Discussion Club
· Love and Relationships
· The Garage
· Health and Fitness
· Merchandise and Shopping
· For Sale/Trade
· Hot Deals with Free Stuff/Contests
· Black Friday 2013
· Forum Issues
· Technical Forum Issues
· Personal Forum Issues
· Suggestion Box
· Moderator Resources
· Moderator Discussions
   

Reply
 
Thread Tools
Old 12-07-2012, 09:56 PM   #1
Dreakon
Junior Member
 
Join Date: Nov 2012
Posts: 22
Default Free, lightweight firewall...

I have Windows 7 Ultimate 64-bit.

I don't really need anything fancy, just something that sits in the background and blocks everything from the internet except applications added to a whitelist. Preferably something that doesn't eat a ton of resources.

I may have just described a firewall lol. I don't need some big security suite or anything.

Anything like that out there?
Dreakon is offline   Reply With Quote
Old 12-08-2012, 01:01 AM   #2
dave_the_nerd
Diamond Member
 
dave_the_nerd's Avatar
 
Join Date: Feb 2011
Location: Minneapolis
Posts: 6,310
Default

Windows has a built-in firewall.
__________________
Scientific progress goes "Boink?"

Windows Gaming Box: AsRock Z77E-ITX / i5-3570k @ 4GHz / 8GB RAM / GTX 660Ti / Samsung EVO 250GB / Seagate Momentus 750GB / Silverstone SG05. NAS: Foxconn D-70S-P (Celeron 1037U) / 4GB DDR3 / Mess 'o Toshiba Drives, / APEX MI-008.
dave_the_nerd is online now   Reply With Quote
Old 12-08-2012, 01:27 AM   #3
Dreakon
Junior Member
 
Join Date: Nov 2012
Posts: 22
Default

Indeed, to my understanding it was kind of crap?
Dreakon is offline   Reply With Quote
Old 12-08-2012, 03:56 AM   #4
Saylick
Senior Member
 
Saylick's Avatar
 
Join Date: Sep 2012
Location: USA
Posts: 455
Default

I've got W7 Pro, only use Windows Firewall, and I have never encountered issues regarding computer security.

The best defense is to not click on suspicious links. Simple as that.

I used to use Avira AV since it's free for personal use but I do not recall if you can set up a whitelist with it.
Saylick is offline   Reply With Quote
Old 12-08-2012, 04:15 AM   #5
beginner99
Platinum Member
 
Join Date: Jun 2009
Posts: 2,149
Default

Get a router (if you don't already have one). Due to how routers work, they act as simple "firewalls", meaning nothing that you did not request gets in. + Windows firewall. That in general enough. However they don't protect you if you surf on dubious sites or double-click on executables from such sites or pirated software.
beginner99 is online now   Reply With Quote
Old 12-08-2012, 08:21 AM   #6
Nothinman
Elite Member
 
Nothinman's Avatar
 
Join Date: Sep 2001
Posts: 30,672
Default

Quote:
Originally Posted by Dreakon View Post
Indeed, to my understanding it was kind of crap?
No, it's fine and I believe you can have it block outbound by default but I don't know why you would want something like that. If you're running software that you trust that little you have other issues with your PC, IMO.
__________________
http://www.debian.org
Nothinman is offline   Reply With Quote
Old 12-08-2012, 09:20 AM   #7
MontyAC
Diamond Member
 
MontyAC's Avatar
 
Join Date: Feb 2004
Posts: 4,050
Default

Try Comodo Firewall.
MontyAC is online now   Reply With Quote
Old 12-08-2012, 11:20 AM   #8
Dreakon
Junior Member
 
Join Date: Nov 2012
Posts: 22
Default

Quote:
Originally Posted by Nothinman View Post
No, it's fine and I believe you can have it block outbound by default but I don't know why you would want something like that. If you're running software that you trust that little you have other issues with your PC, IMO.
Your opinion would be incorrect. I want my presence on the internet to be unknown except to the few applications I run on a daily basis. Isn't that the whole point of a firewall?
Dreakon is offline   Reply With Quote
Old 12-08-2012, 11:40 AM   #9
Nothinman
Elite Member
 
Nothinman's Avatar
 
Join Date: Sep 2001
Posts: 30,672
Default

Quote:
Originally Posted by Dreakon View Post
Your opinion would be incorrect. I want my presence on the internet to be unknown except to the few applications I run on a daily basis. Isn't that the whole point of a firewall?
I guess that perspective could be argued, but the original, general purpose of them is to protect machines not to provide personal privacy. But I still don't get why you're running apps that connect to the Internet if you don't want them to connect to the Internet. Just don't run apps that connect to the Internet and you achieve the same thing without the duct tape solution.
__________________
http://www.debian.org
Nothinman is offline   Reply With Quote
Old 12-08-2012, 11:45 AM   #10
Dreakon
Junior Member
 
Join Date: Nov 2012
Posts: 22
Default

Quote:
Originally Posted by Nothinman View Post
I guess that perspective could be argued, but the original, general purpose of them is to protect machines not to provide personal privacy. But I still don't get why you're running apps that connect to the Internet if you don't want them to connect to the Internet. Just don't run apps that connect to the Internet and you achieve the same thing without the duct tape solution.
Better safe than sorry, right? Unless Windows is going to burn out my PC when using it's firewall for an arguable purpose.
Dreakon is offline   Reply With Quote
Old 12-08-2012, 11:59 AM   #11
lxskllr
Lifer
 
lxskllr's Avatar
 
Join Date: Nov 2004
Location: Somewhere over the rainbow
Posts: 37,691
Default

Quote:
Originally Posted by Dreakon View Post
Better safe than sorry, right? Unless Windows is going to burn out my PC when using it's firewall for an arguable purpose.
The overall point is if you can't trust your programs with net access, you can't trust them at all. Firewalls are best used to protect from probing coming in. Your router will do a fine job with that, and for some icing on the cake, Windows firewall can be used also. Third party firewalls sometimes cause issues, and don't give real benefit in return. They make people feel like they're being secure by providing nags to chase after when a program wants net access, but they do very little for /real/ security. Your efforts would be better spent hardening your browser to prevent exploits and data leaks.
lxskllr is online now   Reply With Quote
Old 12-08-2012, 01:36 PM   #12
Dreakon
Junior Member
 
Join Date: Nov 2012
Posts: 22
Default

Windows Firewall seems to be doing the trick, didn't realize it could be rigged up to block everything but a whitelist. Thanks guys, your concerns with my privacy and whether or not it should be protected via a firewall have been noted.
Dreakon is offline   Reply With Quote
Old 12-08-2012, 05:40 PM   #13
John Connor
Diamond Member
 
John Connor's Avatar
 
Join Date: Nov 2012
Location: Somewhere with an encrypted radio mocking the NSA
Posts: 6,261
Default

http://www.matousec.com/projects/pro...64/results.php
John Connor is offline   Reply With Quote
Old 12-09-2012, 12:21 PM   #14
entropism2
Junior Member
 
Join Date: Jan 2010
Posts: 17
Default

Matousec is generally crap. he gets paid to publish those results, and generally whoever pays more scores higher.

Case in point: Bullguard security uses Bitdefender as their antivirus and Outpost as their firewall. How is it that Outpost with a sponsored link scores near the top, while bullguard is at the bottom?

Last edited by entropism2; 12-09-2012 at 12:27 PM.
entropism2 is offline   Reply With Quote
Old 12-09-2012, 09:59 PM   #15
John Connor
Diamond Member
 
John Connor's Avatar
 
Join Date: Nov 2012
Location: Somewhere with an encrypted radio mocking the NSA
Posts: 6,261
Default

Well, the site has firewall testing tools and if they pass the firewall gets a higher score. I trust Comodo. I ran the tests. Read the reports.

Last edited by John Connor; 12-09-2012 at 10:02 PM.
John Connor is offline   Reply With Quote
Old 12-10-2012, 02:26 AM   #16
beginner99
Platinum Member
 
Join Date: Jun 2009
Posts: 2,149
Default

Quote:
Originally Posted by lxskllr View Post
The overall point is if you can't trust your programs with net access, you can't trust them at all. Firewalls are best used to protect from probing coming in. Your router will do a fine job with that, and for some icing on the cake, Windows firewall can be used also. Third party firewalls sometimes cause issues, and don't give real benefit in return. They make people feel like they're being secure by providing nags to chase after when a program wants net access, but they do very little for /real/ security. Your efforts would be better spent hardening your browser to prevent exploits and data leaks.
exactly.

For OP see this:

https://panopticlick.eff.org/

If you are paranoid you should not trust your browser and even better avoid internet completely.
beginner99 is online now   Reply With Quote
Old 12-10-2012, 03:28 AM   #17
gevorg
Diamond Member
 
gevorg's Avatar
 
Join Date: Nov 2004
Location: Bay Area
Posts: 4,703
Default

http://www.privacyware.com/personal_firewall.html
gevorg is offline   Reply With Quote
Old 12-10-2012, 05:27 PM   #18
cl-scott
ASUS Support
 
Join Date: Jul 2012
Posts: 457
Default

Quote:
Originally Posted by Dreakon View Post
Indeed, to my understanding it was kind of crap?
No pejorative or anything intended here, but your understanding is mistaken. So another vote for listening to lxskllron this.

Security is all about layers. Every layer will have holes, and the idea is that the layer above or below will not have a hole in the same spot. So a firewall is but one layer, not the end all of security. You need to add to that things like careful software selection (e.g. not using programs like Internet Explorer which have well documented issues with malware), and adopting safe(r) computing habits like not clicking on any random link someone sends you in an email, or opening any random attachment sent to you in an email (no matter what celebrity it claims to be nude photos of).
__________________
Scott Billings
Asus Customer Loyalty
Email: cl-scott@asus.com

Opinions expressed are not necessarily those of Asus or Anandtech
cl-scott is offline   Reply With Quote
Old 07-17-2013, 11:03 AM   #19
ultim
Junior Member
 
Join Date: Jul 2013
Posts: 2
Default

Quote:
Originally Posted by Dreakon View Post
I don't really need anything fancy, just something that sits in the background and blocks everything from the internet except applications added to a whitelist. Preferably something that doesn't eat a ton of resources.
Ok, the firewall you have described is exactly TinyWall.
URL: http://tinywall.pados.hu

It is free, and uses Windows' built-in filtering to do its stuff, so it is very lightweight. Works just the way you described it: blocks everything except for programs on your whitelist, and does not display popups at all, it just sits in the background doing its work.

I'm am actually TinyWall's author, so you might want to read an independent professional review: http://www.pcmag.com/article2/0,2817,2421764,00.asp
ultim is offline   Reply With Quote
Old 07-17-2013, 12:40 PM   #20
John Connor
Diamond Member
 
John Connor's Avatar
 
Join Date: Nov 2012
Location: Somewhere with an encrypted radio mocking the NSA
Posts: 6,261
Default

This looks great for my thin client. I was using Private firewall.

Edit, oh crap, I just read the review and I use Win XP embedded SP3.
__________________
Long to be ignored into the great abyss. Will you make the list? AMDzen,DaTT, Nintendesert, preslove,radtechtips,Ruptga, SaDiZTiKStyLeZ, Scholzpdx, justoh, Hugh Jass,ThatsABigOne,dank69
Re-programing Terminator CPUs since 2029.
The I in Internet is capitalized! Get it right!

Last edited by John Connor; 07-17-2013 at 12:43 PM.
John Connor is offline   Reply With Quote
Old 07-17-2013, 01:17 PM   #21
Harvey
Administrator
Elite Member
 
Harvey's Avatar
 
Join Date: Oct 1999
Location: Sherman Oaks, Ca.
Posts: 34,305
Default

Quote:
Originally Posted by MontyAC View Post
Try Comodo Firewall.
+1

Comodo Firewall is excellent. It's included in their Security Suite, but if you are already happy with your AV and anti-spyware progs, to avoid conflicts, you can download just the firewall from CNET. Read the reviews to see why it's so good.

When you install it, look for the subtle link to options in small type at the bottom of one of the first screens, and uncheck the options to install Comodo Dragon, a Chrome-based browser (like we need yet another browser) and Geek Buddy, their online help service (unless you want it and are willing to pay for it). You can also choose NOT to use their alternate secure DNS system.

Doing this will save time during setup and reduce the footprint/resource utilization on your system. If you miss the options link during installation, you can completely uninstall Dragon and Geek Buddy, later, from either the Comodo folder in the Start Menu or Add/Remove Programs in Control Panel.
__________________

There are traitors and terrorists among us. They call themselves "Republicans." They are a greater threat to the U.S. than Al Qaeda and all the Al Qaeda wannabes. They have infested our democratic institutions with the sole objective of thwarting the will of the majority of our citizens.

And Whos's Watching Over Who's Watching Over You?
Tell me, who's telling who's telling you what to do what to do?
Harvey is online now   Reply With Quote
Old 07-17-2013, 02:35 PM   #22
John Connor
Diamond Member
 
John Connor's Avatar
 
Join Date: Nov 2012
Location: Somewhere with an encrypted radio mocking the NSA
Posts: 6,261
Default

I use Comodo. There are two problems with it. One is that if you have Comodo installed before you install Avira, Avira will complain. So install Avira first, the Comodo. Second, if you use an Alcohol 120% virtual DVD drive Comodo will block it. Comodo used to have the option of not installing the defense shield which will block communication to the virtual DVD drive, but now it will install the defense shield whether you like it or not. I should write to Comodo letting them know of the flaw so they can correct this in future updates.
__________________
Long to be ignored into the great abyss. Will you make the list? AMDzen,DaTT, Nintendesert, preslove,radtechtips,Ruptga, SaDiZTiKStyLeZ, Scholzpdx, justoh, Hugh Jass,ThatsABigOne,dank69
Re-programing Terminator CPUs since 2029.
The I in Internet is capitalized! Get it right!
John Connor is offline   Reply With Quote
Old 07-17-2013, 02:51 PM   #23
ultim
Junior Member
 
Join Date: Jul 2013
Posts: 2
Default

Harvey: Comodo's a good firewall, but your recommendation is exactly what the OP didn't want to have: he asked for a firewall that blocks everything except for things he added to the whitelist. In contrast, Comodo will automatically allow all trusted programs in its database, only asking the user for permission for unknown applications. Also, even if you leave out Dragon, opt out of the secure DNS and so on, you still get drivers installed, sandboxing, behavioral analysis, cloud-based functions etc. Sure, these are nice functions and can actually increase your security, but the OP explicitly asked for "nothing fancy", just a plain firewall.

Last edited by ultim; 07-17-2013 at 02:57 PM.
ultim is offline   Reply With Quote
Old 07-17-2013, 03:22 PM   #24
Harvey
Administrator
Elite Member
 
Harvey's Avatar
 
Join Date: Oct 1999
Location: Sherman Oaks, Ca.
Posts: 34,305
Default

Quote:
Originally Posted by ultim View Post
Harvey: Comodo's a good firewall, but your recommendation is exactly what the OP didn't want to have: he asked for a firewall that blocks everything except for things he added to the whitelist. In contrast, Comodo will automatically allow all trusted programs in its database, only asking the user for permission for unknown applications. Also, even if you leave out Dragon, opt out of the secure DNS and so on, you still get drivers installed, sandboxing, behavioral analysis, cloud-based functions etc. Sure, these are nice functions and can actually increase your security, but the OP explicitly asked for "nothing fancy", just a plain firewall.
Ah! My bad. That sounds like it would be almost inverse logic for a general purpose firewall. Until I read your post, I didn't know such a firewall existed. Guess the OP will be glad you came along.

FWIW, I believe Comodo does allow you to turn off sandboxing, as well.
__________________

There are traitors and terrorists among us. They call themselves "Republicans." They are a greater threat to the U.S. than Al Qaeda and all the Al Qaeda wannabes. They have infested our democratic institutions with the sole objective of thwarting the will of the majority of our citizens.

And Whos's Watching Over Who's Watching Over You?
Tell me, who's telling who's telling you what to do what to do?
Harvey is online now   Reply With Quote
Old 07-17-2013, 04:13 PM   #25
John Connor
Diamond Member
 
John Connor's Avatar
 
Join Date: Nov 2012
Location: Somewhere with an encrypted radio mocking the NSA
Posts: 6,261
Default

Comodo does allow you to turn off the sandbox. Right click Comodo's icon in the task bar.
__________________
Long to be ignored into the great abyss. Will you make the list? AMDzen,DaTT, Nintendesert, preslove,radtechtips,Ruptga, SaDiZTiKStyLeZ, Scholzpdx, justoh, Hugh Jass,ThatsABigOne,dank69
Re-programing Terminator CPUs since 2029.
The I in Internet is capitalized! Get it right!
John Connor is offline   Reply With Quote
Reply

Thread Tools

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off

Forum Jump


All times are GMT -5. The time now is 11:49 AM.


Powered by vBulletin® Version 3.8.7
Copyright ©2000 - 2014, vBulletin Solutions, Inc.