help with free firewall for win7 64bit?

[tommo123]

i tried ZA free which is fine on one PC but the other (after some update which the other doesn't have) doesn't remember any options (allow/block) and asks each damn time!

it now decided on its own to block mwob

anyone able to recommend a free firewall?

ta

 

[Nothinman]

Just use the built-in one and don't run shady software?

 

[tommo123]

nothing shady on the laptop

but the built inone offers no controls.

i want to decide specifically what i allow in and out.

 

[stevech]

Built in one has many controls - just have to look in the admin. areas of Windows.

At home, your home router is your firewall.

 

[tommo123]

the router has a simple NAT only - and it's from sky (in the uk) which means it's severly locked down functionality wise. quite annoying when i wanted to use port forwarding - but never mind

as for the windows firewall i honestly just don't like it. it's set by default to allow outbound connections it doesn't recognise through. i don't see an option to be informed if a program gets updated (might have changed due to legit update, or something else).

also, it auto sets rules for you. if i install a program that i dont want to connect to the net and windows sets an allow rule. the whole point in my having a firewall (in this situation) is gone. i can block it after but it's too late now.

the win firewall is enabled but as i said i would rather have a 3rd party one.

 

[Auric]

See recs @ techsupportalert. Among freebees, TinyWall is a proper GUI for the built-in one. I have not tried it but instead use Comodo (firewall only, other components disabled).

 

[tommo123]

tried comodo ages ago but moved away for some reason i can't recall. will check out though

ta

 

[lowrider69]

As Auric mentioned, http://www.techsupportalert.com/best-free-firewall.htm

 

[Miramonti]

I really like Online Armor. Comodo, not so much.

 

[Nothinman]

the router has a simple NAT only - and it's from sky (in the uk) which means it's severly locked down functionality wise. quite annoying when i wanted to use port forwarding - but never mind

as for the windows firewall i honestly just don't like it. it's set by default to allow outbound connections it doesn't recognise through. i don't see an option to be informed if a program gets updated (might have changed due to legit update, or something else).

also, it auto sets rules for you. if i install a program that i dont want to connect to the net and windows sets an allow rule. the whole point in my having a firewall (in this situation) is gone. i can block it after but it's too late now.

the win firewall is enabled but as i said i would rather have a 3rd party one.

I can't say I've ever had the desire to be asked about apps using the network. But then I only run things that I trust.

 

[tommo123]

i trust the apps enough to let them run but not enough to let them needlessly call home.

 

[lxskllr]

i trust the apps enough to let them run but not enough to let them needlessly call home.

Then you can't trust them at all. I agree with Nothinman. Firewall notifications add a lot of work to your setup, but almost no security. The only thing you'll catch by having apps ask permission is script kiddie stuff. Any real threat will get through, firewall or not.

 

[tommo123]

it's not that i think they're dangerous it's that they "phone home".

the notifications dont actually add that much work beyond the 5 mins after installing the firewall.

 

[lxskllr]

it's not that i think they're dangerous it's that they "phone home".

the notifications dont actually add that much work beyond the 5 mins after installing the firewall.

Why would phoning home be an issue though? If it's a reputable app, it's just checking for updates, or retrieving data for your use. I used a firewall to block access way back when I was on dialup. I played FPSs on that connection, and couldn't afford ANY bandwidth going to anything other than the game. I quit using them as soon as I got broadband because I trust the programs I install. For security, any real threat will piggyback on a trusted program to get out, so you won't even get an alert.

 

[mechBgon]

the router has a simple NAT only - and it's from sky (in the uk) which means it's severly locked down functionality wise. quite annoying when i wanted to use port forwarding - but never mind

as for the windows firewall i honestly just don't like it. it's set by default to allow outbound connections it doesn't recognise through. i don't see an option to be informed if a program gets updated (might have changed due to legit update, or something else).

also, it auto sets rules for you. if i install a program that i dont want to connect to the net and windows sets an allow rule. the whole point in my having a firewall (in this situation) is gone. i can block it after but it's too late now.

the win firewall is enabled but as i said i would rather have a 3rd party one.

You can change the Windows firewall to block all outbound communications by default if you prefer, then create Allow rules for exactly what you want to allow. But I'll agree it's not a no-brainer to set up.

 

[gitano]

The internal windows 7 firewall its more then enough powerfull, problem on firewalls its they are complicated for ppl who not know how networking works. The options are use one of those mediocre free 3rd party firewalls or read a bit how to configure the included one

This its a nice guide for the w7 firewall
http://www.mcmcse.com/microsoft/guides/70-680/configure_windows_firewall.shtml

 

[tommo123]

You can change the Windows firewall to block all outbound communications by default if you prefer, then create Allow rules for exactly what you want to allow. But I'll agree it's not a no-brainer to set up.

i've already done that but ta

i don't disable the built in firewall i just don't trust it not to change some settings and allow something through after some win update or some such.

 

[cl-scott]

Just use the built-in one and don't run shady software?

I'm going to second this. And the sad reality is that you're probably better off, on the average, with the Windows-style setup. Someone who knows what they're doing set a number of default values, then made it a pain to go and change them so people don't go mucking about with things they don't understand.

ZA and the like just train people to hit "Allow" every time they're prompted, and that doesn't do ANYTHING to promote security. Quite the opposite really, since people THINK they're safe when they're really not.

Listen to the people who tell you to just use the Windows firewall. You will not magically be more secure using some other program.