Firewall. XP or Zonealarm?

A

ACC-LPM

Not by any stretch of the imagination!

Is the XP built in Firewall as good as Zonealarm etc??

TIA

CHris
 
D

dev

Chris Dove said:
Is the XP built in Firewall as good as Zonealarm etc??

It's fine - for incoming traffic.
But not for unwanted packets being sent OUT by software surreptitiously
installed.
 
C

Chris Dove

I take it your not impressed with the XP Firewall then!

Thanks for the replies

Chris
 
G

Gray@FA

No

And Zonealarm is a pain in the 6 also.

I suggest Tiny Personal Firewall version 2.0.15.
 
G

GSV Three Minds in a Can

from the wonderful said:
Chris Dove said:


It's fine - for incoming traffic.

Except it's about as configurable as a model-T ford. And gives you
absolutely no feedback as to what it's done.
 
C

CZ

Re: ICF
absolutely no feedback as to what it's done.


GSV:

Have you used the ICF log file: \windows\pfirewall.log
 
F

Frenchie

I have it running since the beginning and I never had any problem (virus or
whatsoever).

It nevers tells me if it actually did something to protect me, but I
couldn't care less.
It does it's job and that is what counts for me.

I agree that it is not protecting my PC against outgoing traffic initiated
by software that got installed on my PC via a malicious way.
But therefore I have Ad-Aware from Lavasoft that I am using regularly
anyway.

Meaning : I am very happy with it
 
K

kurttrail

Frenchie said:
I have it running since the beginning and I never had any problem
(virus or whatsoever).

It nevers tells me if it actually did something to protect me, but I
couldn't care less.
It does it's job and that is what counts for me.

I agree that it is not protecting my PC against outgoing traffic
initiated by software that got installed on my PC via a malicious way.
But therefore I have Ad-Aware from Lavasoft that I am using regularly
anyway.

Meaning : I am very happy with it

Ignorance is Bliss!

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
G

GSV Three Minds in a Can

from the wonderful said:
Re: ICF

absolutely no feedback as to what it's done.


GSV:

Have you used the ICF log file: \windows\pfirewall.log

Nope .. I don't currently use ICF, having examined what it was good for,
but if it actually produces a logging file I might increase my rating to
3/10 from 2/10.

However, I don't even find that file on my system, and I'm sure I use
ICF at least briefly, before figuring out it was no use at all on a
network, which connects via a router/switch (basically block all the
network traffic). What does it actually log, and do you have to manually
enable logging?
 
C

CZ

However, I don't even find that file on my system, and I'm sure I use
ICF at least briefly, before figuring out it was no use at all on a
network, which connects via a router/switch (basically block all the
network traffic). What does it actually log, and do you have to manually
enable logging?


GSV:

Headers from the log file:
#Fields: date time action protocol src-ip dst-ip src-port dst-port size
tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info

You have to enable it:
NIC properties: Advanced tab: Settings button: Security logging tab
 
G

GSV Three Minds in a Can

from the wonderful said:
ICF at least briefly, before figuring out it was no use at all on a
network, which connects via a router/switch (basically block all the
network traffic). What does it actually log, and do you have to manually
enable logging?


GSV:

Headers from the log file:
#Fields: date time action protocol src-ip dst-ip src-port dst-port size
tcpflags tcpsyn tcpack tcpwin icmptype icmpcode info

You have to enable it:
NIC properties: Advanced tab: Settings button: Security logging tab

Thanks, next time I set up a virtual TA connection, instead of just
using the router, I'll turn it on (and turn the PcCillin version off)
and see what it finds.
 
B

Bruce Chambers

Greetings --

WinXP's built-in firewall is fine at stopping incoming attacks, and
hiding your ports from probes. It doesn't give you any alarms to tell
you that it is working, though. What WinXP also does not do, is
protect you from any Trojans or spyware that you might download and
install inadvertently. It doesn't monitor out-going traffic at all,
much less block (or at least ask you about) the bad or the
questionable out-going packets.

ZoneAlarm, Kerio, or Sygate are much better, and there are a free
versions available. Personally, I've been very happy with Symantec's
Norton Internet Security 2002 (NIS 2003 is now available), which
includes Norton AntiVirus, Norton Personal Firewall, parental
controls, privacy controls, and ad blocking. (Just the elimination of
most pop-up ads on the Internet made the price worth-while to me.)

You can compare several firewall solutions, some of them free,
here:

The DSL Zone Your Broadband Solution Source
http://thedslzone.com/Software.html


Bruce Chambers

--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH
 
P

PCyr

Hmmm, I guess.

--
Check out http://www.kellys-korner-xp.com for amazing tweaks and fixes

Member of "Newsgroups are for everyone" (Perdita X. Twitt is a
self-appointed, self-righteous, ruthless, bitchy net-cop too!)

Email address is fake to prevent SPAM.
Real email address is pcyr2000 AT hotmail DOT com
Change the obvious to the obvious.
------------------
 
K

kurttrail

PCyr said:
Hmmm, I guess.

Unless you think that using XP's Firewall in conjunction with Adware is
a adaquate replacement for a good firewall that monitors both in &
outbound communications.

--
Peace!
Kurt
Self-anointed Moderator
microscum.pubic.windowsexp.gonorrhea
http://microscum.kurttrail.com
"Trustworthy Computing" is only another example of an Oxymoron!
"Produkt-Aktivierung macht frei!"
 
P

PCyr

Point well taken.

--
Check out http://www.kellys-korner-xp.com for amazing tweaks and fixes

Member of "Newsgroups are for everyone" (Perdita X. Twitt is a
self-appointed, self-righteous, ruthless, bitchy net-cop too!)

Email address is fake to prevent SPAM.
Real email address is pcyr2000 AT hotmail DOT com
Change the obvious to the obvious.
------------------
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top