ZoneAlarm Free 4.5

[bluemoon]

Win98se

Never had a problem with any ZA version (currently using 3.7.211), but
wouldn't mind an alternative with less resource usage that did a
comparable job, especially after looking at the size of the latest ZA
& hearing reports of increased usage from the previous.

After perusing this discussion & others, it looks like the lighter
weight Kerio 2.15 is a prime candidate.

Several users have reported it passing the Shields-UP scan, but I
haven't seen any results on how it does on the GRC leaktest.

No info on Kerio at GRC that I can find.

Is this an old issue or is it still relevant?

Thx

- J -

 

[John Corliss]

Win98se

Never had a problem with any ZA version (currently using 3.7.211), but
wouldn't mind an alternative with less resource usage that did a
comparable job, especially after looking at the size of the latest ZA
& hearing reports of increased usage from the previous.
After perusing this discussion & others, it looks like the lighter
weight Kerio 2.15 is a prime candidate.
Several users have reported it passing the Shields-UP scan, but I
haven't seen any results on how it does on the GRC leaktest.
No info on Kerio at GRC that I can find.
Is this an old issue or is it still relevant?

Bluemoon,
Still very relevant. And thanks for pointing out that neat little
GRC test. Steve Gibson, although one of the (if not the main) true
internet security heros, can be a little, shall we say, "long winded",
so I kinda glanced past it.
I just ran the test and Kerio 2.1.5 passes with flying colors since
it responded with an outgoing connection alert.
Those out there who're reading this and are running XP's built in
firewall need to know that MS's firewall doesn't block outbound
connections at all. Maybe this is because so much of the OS and their
office suite frequently engages in that kind of activity. I have Kerio
configured to block such things as Windows Media Player and Explorer
(*not* IE) from making outbound TCP connections.

I'm very happy with Kerio 2.1.5. Wish I knew what kind of resources
the 4.0.7 version uses. It would be a shame to install it only to find
out that Kerio no longer has a resource advantage over ZA.
It seems to install cleanly over the older version according to the
manual:

http://www.kerio.com/dwn/kpf4-en.pdf

 

[Bubba]

-----BEGIN PGP SIGNED MESSAGE-----

Win98se

Never had a problem with any ZA version (currently using 3.7.211), but
wouldn't mind an alternative with less resource usage that did a
comparable job, especially after looking at the size of the latest ZA
& hearing reports of increased usage from the previous.

After perusing this discussion & others, it looks like the lighter
weight Kerio 2.15 is a prime candidate.

Several users have reported it passing the Shields-UP scan, but I
haven't seen any results on how it does on the GRC leaktest.

No info on Kerio at GRC that I can find.

Is this an old issue or is it still relevant?

Thx

- J -

There appears to still be a number of sites still offering Kerio 2.1.5
download for those that may want to grab it.

Here is just one site found:
http://www.antivirus-online.de/german/linksfire.php3?v=10

Bubba

~~~
This PGP signature only certifies the sender and date of the message.
It implies no approval from the administrators of nym.alias.net.
Date: Sun Nov 23 16:34:46 2003 GMT
From: (e-mail address removed)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQEVAwUBP8Dhp05NDhYLYPHNAQFepAf9F4TuyARcdPZUofFPNPexCUZLTolPWTsE
7FGqMIYhgDaN7MwzDDkVpvJdgXpr2ferS5GRmDpkUla5DyUgy1/BXj86vNxuylSQ
8LYMJmEMVRFQW6dDdxiBIYk6eptL+5o6bQnsJOSYkhHxksBNRAgLvxb/wJfyzNjq
TiUglS5i+raM6ddH8ewhpMd0IRjvYx4b/qQwtmZULyDWLgwIediRaxsvb3PtsDDY
5N7tVLp5mp2vZwIfDF7c+fbjkbiINkA+MkMqMui/cxqYn9QpSfDPWpVNraAPgS3Z
gQ2Qluu3CNhjSdPoB5Q7AR8CnNb42RQ1wB84Qnq4hFlmfyojduc9IA==
=ADg0
-----END PGP SIGNATURE-----

 

[Bubba]

-----BEGIN PGP SIGNED MESSAGE-----

Good question, Rob, but sorry I can't help you there. I'm just
continuing with 2.1.5 because I'm getting to where I loath doing
updates. Hell, I frankly don't even know what an internet gateway is
anymore.

John,

Thanks for all of you input into this issue

Bubba

~~~
This PGP signature only certifies the sender and date of the message.
It implies no approval from the administrators of nym.alias.net.
Date: Sun Nov 23 17:19:48 2003 GMT
From: (e-mail address removed)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQEVAwUBP8DsNk5NDhYLYPHNAQHPPgf/Tthqv1AfOJzgSCCEHKcnuV9pt3GcFvbf
qg1XFalLDFoySK7jIyogJvkhV5MqgI5mBfr3Xtf7Znf2CGD4yCG2/rGCeLJ/VT/V
s8DB8kgCpfTA2EBC+ZA5ka8JcpH6UTVL9NnSBqRzsN1rTAL8jTl/a/B7knhG8SEs
cZB/pfUmEOUe8jxQItX6J8n+aAIV0G8oe91qF+uz1MomPV6qImLMxeGFkJiRzcpe
iyEzYJJlBsXN5Ba/BpSmlZZCneVC2seux1zx7WNg8G/fTwfUC+d72jvjZmSURytb
JbKySPm6bbM6ORScZksvFs45xEvzHCg4hhZ5NdOhTwMYXdCv1ZThNA==
=3s6r
-----END PGP SIGNATURE-----

 

[bluemoon]

Still very relevant. And thanks for pointing out that neat little
GRC test. Steve Gibson, although one of the (if not the main) true
internet security heros, can be a little, shall we say, "long winded",
so I kinda glanced past it.

I understand. When Gibson talks, usually a good idea to listen. Lots
of great stuff, but occasionally requires some unusual patience.

I just ran the test and Kerio 2.1.5 passes with flying colors since
it responded with an outgoing connection alert.

Thanks. That just about seals the deal, as long as I can get it to
work for me.

I have Kerio configured to block such things as Windows Media Player and
Explorer (*not* IE) from making outbound TCP connections.

I'm pretty clueless on the filtering aspect. Just want to be able to
configure Kerio to provide the same essential protection as ZAF.
Nothing fancy. Enough to get the job done without overdoing it, as in
blocking myself from trusted areas & not knowing how to get around it,
i.e. "Sponge's" Kerio List Type 2 "Normally needs no tweaking except
if you want to visit Microsoft." (see link below)

Would appreciate opinions/comments on the following

Sponge's Security Solutions
http://www.geocities.com/yosponge/4firewal.html

Kerio firewall and full stealth
http://www.computing.net/security/wwwboard/forum/6616.html

Online Zone, Page 5 info & filter set download
http://www.quadranet.org/tokezone/online.html

Rgds

blue

 

[donutbandit]

(e-mail address removed) (bluemoon) wrote in

I understand. When Gibson talks, usually a good idea to listen. Lots
of great stuff, but occasionally requires some unusual patience.

Those of us who actually know something about computer security tend to
laugh when Gibson talks. Take everything he says with a grain of salt. He's
almost completely clueless.

 

[Jordan]

(e-mail address removed) (bluemoon) wrote in


Those of us who actually know something about computer security tend
to laugh when Gibson talks. Take everything he says with a grain of
salt. He's almost completely clueless.

I've always respected his knowledge and opinions regarding security. Please
site examples of his cluelessness.

 

[bluemoon]

Wish I knew what kind of resources the 4.0.7 version uses. It would be a
shame to install it only to find out that Kerio no longer has a resource
advantage over ZA.

Not about resources, but you may want to read this

[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE
http://www.dslreports.com/forum/remark,8582207~root=kerio~mode=flat

blue

 

[John Corliss]

Wish I knew what kind of resources the 4.0.7 version uses. It would be a
shame to install it only to find out that Kerio no longer has a resource
advantage over ZA.

Not about resources, but you may want to read this

[Kerio 4.x] port 44334 is OPEN: BIG SECURITY HOLE
http://www.dslreports.com/forum/remark,8582207~root=kerio~mode=flat

blue

Hmmmmm. Thanks! Guess I'll stick with 2.1.5.