"Thomas H" <T@H> wrote in message
news:(E-Mail Removed)...
> If it's a home computer, look at getting a hardware firewall/router (like
> a Linksys rvs4000 or Netgear FVS318). That way, you don't have to run any
> firewall software at all, and it's not o/s dependant so you just buy it
> "once"- even if you add/remove/upgrade your computer(s). I've had mine
> for years and no problems!
First, my router at home provides a hardwall firewall. In my opinion,
that's insufficient protection. Yes, it will keep out most, but not all,
attacks from the itnernet, but it does not protect a machine from intrusions
that originate on the local lan or malware that sends out-bound traffic.
Second, I'm running Vista on my laptop, and I travel everywhere with it. I
connect to WiFi hotspots, hotel LANs, client LANs and use my cellphone as a
modem. I need a reliable bi-directional firewall and, unfortunately,
Vista's firewall, while bi-directional, is a pain to configure for out-bound
traffic protection. I've been trying the Sphinx firewall add-on for Vista.
It appears to do what Vista's standalone does not, i.e. query me for
unidentified out-bound traffic, which is all that I want.
>
> If it's a laptop, you'll still need some kind of firewall software when
> you travel- but at least at home, you can disable it and just use the
> hardware firewall.
In my opinion, it's a mistake not to use a software firewall, regardless of
the use of a router-based firewall, particularly if it's a consumer router.
What happens if the software you've just purchased or downloaded installs a
rootkit?
>
> Plus, unless the computer is infected or if you're trying to debug
> something, there's no real reason for outgoing protection...
Yes, but that's the whole point. Do you really think you'll know, 100% of
the time, if your computer is infected? No anti-malware software detects
100% of the malware out there and, particularly with respect to rootkits,
you may not even know you're infected unless you either notice your modem
lights blinking when they shouldn't or the malware interferes with the
operation of your machine.
>
> -Thomas
>
> "PTravel" <(E-Mail Removed)> wrote in message
> news:(E-Mail Removed)...
>>
>> "StephenB" <(E-Mail Removed)> wrote in message
>> news:(E-Mail Removed)...
>>> "PTravel" <(E-Mail Removed)> wrote:
>>>
>>>>As has been noted, the default for the Windows Vista Firewall is to NOT
>>>>block out-going traffic. Though outbound blocking can be turned on, the
>>>>Windows Firewall does NOT pop up a "Allow/Disallow" window for programs
>>>>trying to send outbound traffic, as it does with programs accepting
>>>>in-bound
>>>>traffic. The only way to allow programs to send outbound traffic is to
>>>>add
>>>>a specific rule for each program. Not only is this a pain, but it makes
>>>>it
>>>>difficult to install new programs that utilize on-line components as
>>>>part of
>>>>the installation process.
>>>>
>>>>PCTools has a free Vista-compatible firewall, but it is very buggy and,
>>>>on
>>>>my Vista and XP machines, blocked access to other computers on the local
>>>>LAN
>>>>which, of course, makes it virtually useless.
>>>>
>>>>Has anyone had any experience with any other free or inexpensive
>>>>Vista-compatible firewall?
>>>
>>> Not free, but has the added benefit of a/v protection - Windows Live
>>> OneCare.
>>> It has a two way firewall - http://onecare.live.com
>>> -steve
>>
>> Thanks, Steve, but I only want a firewall. I have very effective
>> third-pary apps for malware and anti-virus, and I definitely am not
>> interested in performance tune-up (I do that myself) and other add-ons.
>> I really wish Microsoft would get away from these all-in-one products
>> that do everything okay but nothing really, really well.
>>
>>> --
>>> Stephen Boots
>>> MVP Windows Live
>>> Windows Live OneCare Forum Moderator
>>> (E-Mail Removed)
>>
>
>