Firewall recommendations - Vista 64

Grinja

Member
Jul 31, 2007
168
0
0
Hi all,
If there any descent firewall apps out for vista 64.
I really liked Sygate personal firewall (which i still use on my XP laptop) because it was very simple to setup and use.

So far I have tried Commodo 3 but after two months I just gave up. It seemed it could never remember my choices on it's prompts and unless rules were explicitly added it would forever need intervention.

Anyone got any favourable experiences with Firewall software (Free or Otherwise?)
 

QuixoticOne

Golden Member
Nov 4, 2005
1,855
0
0
I've found comodo 3 tolerable but annoying for its various bugs and design annoyances.
The best firewall is often an external hardware (router) or UNIX PC based one, but that doesn't have the access to know what programs are causing the traffic and can't as easily block spyware / phone-home ware because of that. They do excel at implementing things like QOS and better packet related firewalling rules though.

 

Psynaut

Senior member
Jan 6, 2008
653
1
0
Same here. I went from Zone Alarm, which was easy to use, to Comodo, which claimed to be easy to use, and after hours of adding instructions and reading instructions, I gave up and uninstalled it. In my search for a new firewall, I read that Agnitum Outpost Firewall is pretty good, so I got a copy to try, but haven't gotten around to installing it yet. I would be interested in any opinions on it, as might the OP (if it would be on topic, I don't want to hijack the thread though).
 

nova2

Senior member
Feb 3, 2006
982
1
0
comodo or agnitum outpost firewall.

if you have any strange problems with comodo or vista itself then i would suggest you disable the defence+ feature.

a shame you can't control that nice feature more.
 

Elstupido

Senior member
Jan 28, 2008
643
0
0
No problems at all with Vista firewall and wireless router. Made the mistake of installing Zonealarm a good while back before it was ready for Vista. BSOD, and at first I blamed it on Vista.
 

OLDQUAKER

Junior Member
Aug 24, 2008
11
0
0
I use agnitum outpost pro x 6 months now on xp and love it, very easy to configure and most times i dont even know its there. It has never interfered with anything I have needed to do.
 

bsobel

Moderator Emeritus<br>Elite Member
Dec 9, 2001
13,346
0
0
Norton Internet Security 2009.

"The Norton 2009 products have been designed with a ?zero-impact? performance goal, supported by more than 300 improvements that span nearly every aspect of the product, from the scanning engines to the user interface. The beta versions are on track to deliver on several key metrics including a one-minute installation, the industry?s fastest protection updates and less than half the memory usage of the next leading competitor"

And guys, seriously, we made the team do some incredible things here, I dont think any of you will recongnize the product. It really is light and incredibly fast.

Bill
 

takeru

Golden Member
Jan 1, 2002
1,206
8
81
m0n0wall.

i run it in a virtual machine, and run the host systems connection through the vm before going out :) yes, its possible
 

Stern

Senior member
Sep 3, 2004
625
0
86
I've been using ZA Pro on Windows XP for years and its never caused me a problem. I was wondering if I can just uninstall it from my XP, then install onto my new Vista 64bit installation with the same key?
 

QuixoticOne

Golden Member
Nov 4, 2005
1,855
0
0
Do you use the built in Vista firewall (or a 3rd party windows host level one) ALSO?

Something like monowall is great for context free firewalling, but only a host based firewall will ALSO know that the http tcp 80 connection to www.biteme.aol.com is really coming from SpyOnMe.EXE as opposed to coming from InternetExplorer.exe or WindowsUpdate.exe, and the extra bits of information as to what process / security context is making an outbound request (or receiving an incoming one) can be helpful for securing the system.

Admittedly for the host process context free aspects something like monowall will be vastly superior at network layer 2 / 3 firewall rule management and implementation, so it is a valuable addition but I would not want to use ONLY that.

Originally posted by: takeru
m0n0wall.

i run it in a virtual machine, and run the host systems connection through the vm before going out :) yes, its possible

 

smb

Senior member
Mar 7, 2000
563
0
76
I'm just curious as to what you guys are doing that would require a firewall? I personally don't visit any questionable sites or open emails from address I don't know. If you set your router to discard ping, and set up the correct filters you should be good to go. It is a serious question btw, and not a "you don't need a firewall" post. Firefox 3 is pretty good at catching sites that are bad.
 

QuixoticOne

Golden Member
Nov 4, 2005
1,855
0
0
I personally don't visit any questionable sites or open emails from address I don't know.

What's your email address, or your brother's? I'll be glad to send you a message 'from' them, and so would any spammer or malware out there. It is extremely common for a given user's PC to get infected (say your brother's) and then for the infection to copy all the addresses in that person's address book and send each of them a malware message *from* the person's account that has been infected, so the recipients already know / trust the source of the message. You can't tell ANYTHING by the Sender or Subject or anything like that 99% of the time.


I personally don't visit any questionable sites

What exactly is a 'questionable site'?
You mean something small, never heard of before, not run by a big reputable internet company?

BusinessWeek website attacked and hosts malware
Posted on 15.09.2008
Folks from Sophos have discovered that the website of BusinessWeek, the world famous weekly magazine, has been attacked by hackers in an attempt to infect its readership with malware.

Worms spread via spam on Facebook and MySpace
'Paris Hilton Tosses Dwarf On The Street'
By John Leyden ? Get more from this author
Posted in Anti-Virus, 1st August 2008 10:06 GMT
Miscreants have created a pair of worms targeting MySpace and Facebook users. Two variants of a new worm - dubbed Koobface - are the first to use social engineering sites to press-gang infected machines into botnets, warns net security firm Kaspersky Lab.

When a user with an infected machine accesses his MySpace account the Koobface-A variant posts links to a malicious website in the commentaries of friends' accounts. Koobface-B, which targets Facebook users, sends spam messages to an infected users' friends through the social networking site.

Widespread SQL injection & Javascript malware
Published by
travis
at May 15, 2008 in malware and SQL injection.

This is the first time I have ever seen SQL injection this widespread and in an automated fashion. Before it?s all said and done this could be !!! HUGE !!!. News of this has been trickling out since the end of April with the first hint of it at the beginning of the year.

Basically what?s happening is attackers are using SQL injection, in some sort of automated fashion, to insert Javascript malware into databases of some popular websites, the United Nations for example. Once a user visits an infected website (un.org) they will unknowingly be sent to a malicious site where attackers try numerous exploits to see if they succeed. Keep in mind the user will remain on un.org as if everything is fine and dandy but in the background exploits are being launched.


Originally posted by: smb
I'm just curious as to what you guys are doing that would require a firewall? I personally don't visit any questionable sites or open emails from address I don't know. If you set your router to discard ping, and set up the correct filters you should be good to go. It is a serious question btw, and not a "you don't need a firewall" post. Firefox 3 is pretty good at catching sites that are bad.

 

smb

Senior member
Mar 7, 2000
563
0
76
ok, so you ask for my email address. for what? i don't give that to just anyone or any place.
Sorry, if you are opening "penis enlargement" emails then perhaps you should use a firewall.
yea you can quote every bad blog out there, but a firewall should never be a substitute for
just good common sense.
 

Phynaz

Lifer
Mar 13, 2006
10,140
819
126
I personally don't visit any questionable sites

Really?

How about when Sony's PS3 site was hacked to include a drive by download.
Is that a questionable site?

How about the ads on this site or Youtube videos?(Flash flaw)
 

smb

Senior member
Mar 7, 2000
563
0
76
sorry, I don't have a ps3.

will a good antivirus take care of this?
everything I download I always scan before I unzip or use.

this is turning into an arguement, and I didn't intent for that to happen.

last reply to this topic.
 

TheNoblePlatypus

Senior member
Dec 18, 2001
291
0
76
Originally posted by: smb
sorry, I don't have a ps3.

will a good antivirus take care of this?
everything I download I always scan before I unzip or use.

this is turning into an arguement, and I didn't intent for that to happen.

last reply to this topic.

Not much of an argument, considering his example was showing you that common websites have been used for exploitations and you explained you didn't have a PS3. Awfully concrete thinking. Too bad that's your last reply, though.