Learning about Kerio Firewall (was BlackIce)

[MIDIman]

Mybe its time to just dump it and start over...

Changed from BlackIce to Kerio...see my new message four messages down...

 

[SaintTigurius]

Maybe its time to just dump it and start over...

Time for a new mouse,
But it can be a deffective upgrade the mouse, try latest firmware.

 

[InlineFive]

Take a look at this thread. It has some firewall reccomendations in it. I would also consider dumping BlackIce has it has some known exploits and higher resource usage then other popular software firewalls.

 

[Kelemvor]

We have black ice on all of our thousands of laptops and don't have any issues with anything. Might be a conflict between some other software you have.

 

[MIDIman]

I've moved to Kerio - new issue - as I learn more about firewalls:

Everytime I load up Internet Explorer and goto a website, I get a localhost Outgoing message from Kerio that is a random UDP port. For example see below. The port is generally in the 1400-range. Is this normal?

[1/18/2005 10:10:15 AM]

Direction: outgoing
Local Point: localhost [127.0.0.1], port 1412
Adapter: N/A
Remote Point: localhost [127.0.0.1], port 1412
Protocol: UDP

Application path: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Description: Internet Explorer
File version: 6.00.2800.1106 (xpsp1.020828-1920)
Created: 2004/7/2, 20:10:38
Modified: 2002/8/29, 03:41:26
Accessed: 2005/1/18, 14:49:41

RuleId = 1140851530

 

[MIDIman]

Anyone? Is this a trojan or spyware, or perfectly normal?

When I hit Deny, whatever page I've asked to surf to still loads, but very slowly.

[1/18/2005 5:44:49 PM]

Direction: outgoing
Local Point: localhost [127.0.0.1], port 1043
Adapter: N/A
Remote Point: 127.0.0.1, port 1043
Protocol: UDP

Application path: C:\Program Files\Internet Explorer\IEXPLORE.EXE
Description: Internet Explorer
File version: 6.00.2800.1106 (xpsp1.020828-1920)
Created: 2004/7/2, 20:10:38
Modified: 2002/8/29, 03:41:26
Accessed: 2005/1/18, 22:40:55

RuleId = 335545166

 

[MIDIman]

OK - finally had some time to do some searching, and it looks like I should have outgoing UDP 1024-5000 open for web browsing, correct?

What else is pretty much given?