If not Zone Alarm then what? Outbound filtering still needed.

[Big_Al]

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

 

[Carey Frisch [MVP]]

Install Windows OneCare, and you'll not have to
worry about those issues. You can try it FREE
for ninety (90) days. This is a brand new version
and is very robust! Uses very little system resources!
http://onecare.live.com/standard/en-us/default.htm

With the excellent Windows OneCare package, there is
no need to install a multitude of different security software.

OneCare includes:

-- An excellent antivirus application
-- An excellent firewall application
-- An excellent antispyware application
-- Automatic system tune-ups
-- Automatic hard drive defrag
-- Checks for updates to be sure they are installed
-- Schedules automatic backups of important files
-- New version 2.5 just released - designed to work
exceptionally well with Windows Vista & XP.
-- All-in-one convenient, easy to install application


--
Carey Frisch
Microsoft MVP
Windows Desktop Experience -
Windows Vista Enthusiast

---------------------------------------------------------------

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

 

[JS]

Comodo Firewall Pro 3.0 (Free Version)
http://www.personalfirewall.comodo.com/download_firewall.html

Be aware that from my experience this firewall is overly aggressive
and sometimes can drive you nuts.

It's generally rated better than ZA for security.
Try it, you may like it or hate it.

JS
http://www.pagestart.com

 

[jimbo571]

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

Comodo firewall - completely free .

 

[Unknown]

There is no need to filter outbound traffic.

 

[Bill in Co.]

I was just wondering about that. What is the purpose of doing that
(filtering outbound traffic)?

 

[Bob Lucas]

Outbound filtering could provide useful protection, if your computer
became infected by a trojan. Outbound filtering also allows the user to
see precisely which programs are using or seeking access to the
Internet.

We are all entitled to differing opinions - and in my opinion, I would
prefer not to connect to the Internet without protection from a firewall
that offers Outbound filtering.

 

[Bill in Co.]

Outbound filtering could provide useful protection, if your computer
became infected by a trojan. Outbound filtering also allows the user to
see precisely which programs are using or seeking access to the
Internet.

As opposed to incoming filtering?? If so, why?

 

[Paul Montgomery]

Outbound filtering could provide useful protection, if your computer
became infected by a trojan.

Protection from what? It's too freakin' late if your computer has
already been infected.

Outbound filtering is for paranoids who need to know all the programs
that are installed on their systems that need 'net access. It serves
no useful purpose other than that.

 

[Bob Lucas]

As opposed to incoming filtering?? If so, why?

snip

Let me paint a possible scenario. Your computer becomes infected with
malaware. It is a new virus or trojan, so your anti-virus software does
not detect the infection. The virus uses your Internet connection to
distribute spam and pornographic emails - or could harvest sensitive
information from your computer.

The trojan has its own mail engine, so it does not need to use your
default email client (Outlook, Outlook Express, Windows Mail, Windows
Live Mail, etc.) and is able to bypass any security settings in your
default email client.

A firewall with outbound filtering could detect that an unauthorised
program had requested access to the Internet - and would prevent rogue
programs from using your Internet connection to distribute emails.

I know there are many "ifs". However, a similar event happened to me
several years ago. At the time, I was using McAfee VirusScan, which did
not detect the problem. However, I submitted the suspect program for
analysis and learned that it was a new virus - which McAfee added to the
virus definition files within a few days.

Incidentally, McAfee has become so bloated that I subsequently changed
to a different anti-virus program. However, no anti-virus software is
infallible. That is one of the ways that new viruses propagate - so
even if you take precautions, it could happen to you.

I still don't know how my computer became infected and without the Zone
Alarm firewall, I would have been totally unaware of the infection until
the virus had delivered its payload.

If you are unconvinced, pay a visit to Gibson Research Corporation's
excellent website - and view the page at
http://www.grc.com/lt/leaktest.htm.

However, as I said previously, you are entitled to your own opinions.
If you really do believe the risk is minimal, you could rely upon the
firewall in Windows XP, which filters inbound threats only.

 

[Big_Al]

Outbound filtering could provide useful protection, if your computer
became infected by a trojan. Outbound filtering also allows the user to
see precisely which programs are using or seeking access to the Internet.

We are all entitled to differing opinions - and in my opinion, I would
prefer not to connect to the Internet without protection from a firewall
that offers Outbound filtering.

And this is the exact reason I (the OP) posted the question. I
download and install a program and I want to know it is accessing the
internet. Not that its pirated, but a wallpaper changer program for
example, has no need to access my internet, and doing so makes me
curious about its value and usually gets removed.

 

[Kayman]

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

For the average homeuser, the Windows Firewall in XP does a fantastic job
at its core mission and is really all you need if you have an 'real-time'
anti-virus program, [another firewall on your router or] other edge
protection like SeconfigXP and practise safe-hex.
The windows firewall deals with inbound protection and therefore does not
give you a false sense of security. Best of all, it doesn't implement lots
of nonsense like pretending that outbound traffic needs to be monitored.

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater¡Xit¡¦s a gimmick that only gives the
impression of improving your security without doing anything that actually
does improve your security."

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html

 

[Kayman]

snip

Let me paint a possible scenario. Your computer becomes infected with
malaware. It is a new virus or trojan, so your anti-virus software does
not detect the infection. The virus uses your Internet connection to
distribute spam and pornographic emails - or could harvest sensitive
information from your computer.

The trojan has its own mail engine, so it does not need to use your
default email client (Outlook, Outlook Express, Windows Mail, Windows
Live Mail, etc.) and is able to bypass any security settings in your
default email client.

A firewall with outbound filtering could detect that an unauthorised
program had requested access to the Internet - and would prevent rogue
programs from using your Internet connection to distribute emails.

Nonsense! What makes you think that the malware does not manipulate the 3rd
party firewall - the one which claims: "It can stop/control malicious
outbound traffic"?
Prevention is the key!
The only reasonable way to deal with malware is to prevent it from being
run in the first place. That's what AV software or Windows' System
Restriction Policies are doing. And what 3rd party Personal Firewalls fail
to do!

It's time to educate yourself!

Read through:
Deconstructing Common Security Myths.
http://technet.microsoft.com/en-us/magazine/cc160979.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html

 

[Kayman]

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

It's been suggested using Windows Live OneCare whichis trial/payware.
The OneCare package includes various additional software and it is
suggested that there is no need to install a multitude of different
security software. At first glance this seems to be fair enough.

Also, I read somewhere:

What makes OneCare unique is that it essentially provides many of the
centrally-managed IT administrative functionality one might expect in a
corporate environment, but to home users. But instead of providing a human
administrator, Microsoft provides an Internet-based service that works
continually and automatically and is always up to date. You only deal with
OneCare, per se, when something goes wrong. And if something really goes
wrong, Microsoft is providing support via phone, email, or Web chat.
[unquote]

I am not sure if this represents is real value as assistance, troubleshoot
advice can be obtained freely from various newsgroups and/or fora and good
quality freeware can be configured to update automatically.

So, let's examine this package more closely from a (non-expert) users
point-of-view and if Windows Live OneCare represents real dollar value for
the average homeuser.

Windows Live OneCare includes:

-- An excellent antivirus application --.

Many experts used to suggest that Windows Live OneCare is on the bottom of
the list as far as finding viruses\malware\trojans.
However, I understand that the new version of this (OneCare) AV application
has changed for the better and the virus catchrate has improved
significantly.
It is debatable however if OneCare AV is significantly better compared to
good quality free-ware application such as Avira AntiVir® Personal or
avast! 4 Home Edition. Even if OneCare is an equally good AV application,
you'd still have to fork out dollars.
So, as far as performance is concerned why would anybody considering
purchasing OneCare?

-- An excellent firewall application --.

An excellent firewall application is already included in both WinXP and
Vista operating systems.

Managing the Windows Vista Firewall
http://technet.microsoft.com/en-us/magazine/cc510323.aspx

So, why would anybody want to pay for something which comes free in the
first place?

-- An excellent antispyware application --.

An antispyware (A-S) application (WindowsDefender) is already included in
Vista OS and can be freely downloaded for WinXP. Add SuperAntispyware Free
Edition and you're as good as gold.
So, why would anybody want to pay for something which comes free in the
first place?

-- Automatic system tune-ups --.

Why I donÿt use registry cleaners!
http://www.edbott.com/weblog/archives/000643.html

IMO, a safer option is to use CCleaner ignoring the registry
scanning/fixing option followed by using NTREGOPT (all freely available).

So, why would anybody jeopardize proper functioning of their OS?

-- Automatic hard drive defrag --.

A HDD defragmentation utility is already included in both WinXP and Windows
Vista which can be scheduled to scan at predetermined times.

Schedule a weekly defragmentation
http://www.microsoft.com/windowsxp/using/setup/tips/defrag.mspx

Features of the Windows Vista hard disk defragmentation utility
Scheduled defragmentation
http://support.microsoft.com/kb/942092

Also, there are a few freeware defrag tools available which, the best to my
knowledge, outperform the in-build version.
So, why would anybody want to pay for something which comes free in the
first place?

-- Checks for updates to be sure they are installed --.

Aside from Using the free Windows Update function in both WinXP and Windows
Vista, Secunia Personal Software Inspector, Belarc and M/S Security
Baseline Analyzer can assist also.
So, why would anybody want to pay for something which comes free in the
first place?

-- Schedules automatic backups of important files --.

Backup and Restore Center is an in-build version and comes free with both
WinXP and Vista operating system.

Windows XP Backup Made Easy
http://www.microsoft.com/windowsxp/using/setup/learnmore/bott_03july14.mspx
Windows Backup and Restore Center
http://www.microsoft.com/windows/windows-vista/features/backup.aspx

So, why would one want to pay for something which comes free in the first
place?

BTW, some users are impressed with Cobian Backup-Free.

-- New version 2.5 just released - designed to work exceptionally well with
Windows Vista & XP --.

One would hope that this is the case, after all, it's a MSFT product!
Selective, good-quality freeware applications are working like a charm as
well in both WinXP and Vista operating systems!

-- All-in-one convenient, easy to install application --.

So are selective, good-quality freeware applications/utilities.

-- On sale at Newegg for only $19.99 --

If I were in the spending mood and were looking for a worthwhile addition
to my Operating System I'd find another $30.- and purchase Acronis Back-Up
package.

Well, considering the above, I haven't got the foggiest idea what the hype
about Windows Live OneCare package is all about!

But, it is not unusual that in Multi National Organizations such as MSFT
the Section Heads of the Commercial Department and the Program Engineers
(Operating Department), are having conflicting opinions as they work for
different goals.
The Program Engineers are the pragmatic type, they develop things, they
know things. They have to demonstrate high integrity in order to produce
high quality software.
The Advertising People know how to sell and push things. They mostly walk
on a fine line but cross it frequently for the sake of the dollar almighty
and in the name of the share holders. The nature of their job prevents them
to be moral and ethical.
The goals of the Commercial Dept. are not necessarily in the best interest
for the end user.
Would MSFT recommend the use of registry cleaners if Dr. Mark Russinovich
and Ed Bott had a say? I don't think so!
Would MSFT have included these lame additions to their Windows Live OneCare
application if their program engineers had a say? I don't think so!
As usual, Marketing trumps common sense. Let's hope that users pay more
attention to the details instead to the sensational promotion.

 

[JS]

Sort of like monitoring who walks into your house,
but you don't care who walks back out and what they are carrying.

JS

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

For the average homeuser, the Windows Firewall in XP does a fantastic job
at its core mission and is really all you need if you have an 'real-time'
anti-virus program, [another firewall on your router or] other edge
protection like SeconfigXP and practise safe-hex.
The windows firewall deals with inbound protection and therefore does not
give you a false sense of security. Best of all, it doesn't implement lots
of nonsense like pretending that outbound traffic needs to be monitored.

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater¡Xit¡¦s a gimmick that only gives
the
impression of improving your security without doing anything that actually
does improve your security."

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html

 

[Dave M]

There is *NO* registry cleaning feature in the Live OneCare application.
Perhaps your confusing the free OneCare Safety Scanner utility with the by
subscription OneCare application package.
--
Regards, Dave

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

It's been suggested using Windows Live OneCare whichis trial/payware.
The OneCare package includes various additional software and it is
suggested that there is no need to install a multitude of different
security software. At first glance this seems to be fair enough.

Also, I read somewhere:

What makes OneCare unique is that it essentially provides many of the
centrally-managed IT administrative functionality one might expect in a
corporate environment, but to home users. But instead of providing a human
administrator, Microsoft provides an Internet-based service that works
continually and automatically and is always up to date. You only deal with
OneCare, per se, when something goes wrong. And if something really goes
wrong, Microsoft is providing support via phone, email, or Web chat.
[unquote]

I am not sure if this represents is real value as assistance, troubleshoot
advice can be obtained freely from various newsgroups and/or fora and good
quality freeware can be configured to update automatically.

So, let's examine this package more closely from a (non-expert) users
point-of-view and if Windows Live OneCare represents real dollar value for
the average homeuser.

Windows Live OneCare includes:

-- An excellent antivirus application --.

Many experts used to suggest that Windows Live OneCare is on the bottom of
the list as far as finding viruses\malware\trojans.
However, I understand that the new version of this (OneCare) AV application
has changed for the better and the virus catchrate has improved
significantly.
It is debatable however if OneCare AV is significantly better compared to
good quality free-ware application such as Avira AntiVir® Personal or
avast! 4 Home Edition. Even if OneCare is an equally good AV application,
you'd still have to fork out dollars.
So, as far as performance is concerned why would anybody considering
purchasing OneCare?

-- An excellent firewall application --.

An excellent firewall application is already included in both WinXP and
Vista operating systems.

Managing the Windows Vista Firewall
http://technet.microsoft.com/en-us/magazine/cc510323.aspx

So, why would anybody want to pay for something which comes free in the
first place?

-- An excellent antispyware application --.

An antispyware (A-S) application (WindowsDefender) is already included in
Vista OS and can be freely downloaded for WinXP. Add SuperAntispyware Free
Edition and you're as good as gold.
So, why would anybody want to pay for something which comes free in the
first place?

-- Automatic system tune-ups --.

Why I don’t use registry cleaners!
http://www.edbott.com/weblog/archives/000643.html

IMO, a safer option is to use CCleaner ignoring the registry
scanning/fixing option followed by using NTREGOPT (all freely available).

So, why would anybody jeopardize proper functioning of their OS?

-- Automatic hard drive defrag --.

A HDD defragmentation utility is already included in both WinXP and Windows
Vista which can be scheduled to scan at predetermined times.

Schedule a weekly defragmentation
http://www.microsoft.com/windowsxp/using/setup/tips/defrag.mspx

Features of the Windows Vista hard disk defragmentation utility
Scheduled defragmentation
http://support.microsoft.com/kb/942092

Also, there are a few freeware defrag tools available which, the best to my
knowledge, outperform the in-build version.
So, why would anybody want to pay for something which comes free in the
first place?

-- Checks for updates to be sure they are installed --.

Aside from Using the free Windows Update function in both WinXP and Windows
Vista, Secunia Personal Software Inspector, Belarc and M/S Security
Baseline Analyzer can assist also.
So, why would anybody want to pay for something which comes free in the
first place?

-- Schedules automatic backups of important files --.

Backup and Restore Center is an in-build version and comes free with both
WinXP and Vista operating system.

Windows XP Backup Made Easy
http://www.microsoft.com/windowsxp/using/setup/learnmore/bott_03july14.mspx
Windows Backup and Restore Center
http://www.microsoft.com/windows/windows-vista/features/backup.aspx

So, why would one want to pay for something which comes free in the first
place?

BTW, some users are impressed with Cobian Backup-Free.

-- New version 2.5 just released - designed to work exceptionally well with
Windows Vista & XP --.

One would hope that this is the case, after all, it's a MSFT product!
Selective, good-quality freeware applications are working like a charm as
well in both WinXP and Vista operating systems!

-- All-in-one convenient, easy to install application --.

So are selective, good-quality freeware applications/utilities.

-- On sale at Newegg for only $19.99 --

If I were in the spending mood and were looking for a worthwhile addition
to my Operating System I'd find another $30.- and purchase Acronis Back-Up
package.

Well, considering the above, I haven't got the foggiest idea what the hype
about Windows Live OneCare package is all about!

But, it is not unusual that in Multi National Organizations such as MSFT
the Section Heads of the Commercial Department and the Program Engineers
(Operating Department), are having conflicting opinions as they work for
different goals.
The Program Engineers are the pragmatic type, they develop things, they
know things. They have to demonstrate high integrity in order to produce
high quality software.
The Advertising People know how to sell and push things. They mostly walk
on a fine line but cross it frequently for the sake of the dollar almighty
and in the name of the share holders. The nature of their job prevents them
to be moral and ethical.
The goals of the Commercial Dept. are not necessarily in the best interest
for the end user.
Would MSFT recommend the use of registry cleaners if Dr. Mark Russinovich
and Ed Bott had a say? I don't think so!
Would MSFT have included these lame additions to their Windows Live OneCare
application if their program engineers had a say? I don't think so!
As usual, Marketing trumps common sense. Let's hope that users pay more
attention to the details instead to the sensational promotion.

 

[Bob Lucas]

And this is the exact reason I (the OP) posted the question. I
download and install a program and I want to know it is accessing the
internet. Not that its pirated, but a wallpaper changer program for
example, has no need to access my internet, and doing so makes me
curious about its value and usually gets removed.

Precisely !!!

An outbound firewall filter is not a substitute for robust antivirus
software. However, it provides additional protection against:

Spyware
Previously undetected trojans and viruses
Internet usage by programs that should not require access to the web

 

[Unknown]

I think you have a cranial rectal inversion.

There's no need to wear shoes or have a lawn.

 

[Unknown]

Ridiculous comment.

Sort of like monitoring who walks into your house,
but you don't care who walks back out and what they are carrying.

JS

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

For the average homeuser, the Windows Firewall in XP does a fantastic job
at its core mission and is really all you need if you have an 'real-time'
anti-virus program, [another firewall on your router or] other edge
protection like SeconfigXP and practise safe-hex.
The windows firewall deals with inbound protection and therefore does not
give you a false sense of security. Best of all, it doesn't implement
lots
of nonsense like pretending that outbound traffic needs to be monitored.

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater¡Xit¡¦s a gimmick that only gives
the
impression of improving your security without doing anything that
actually
does improve your security."

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135,
137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html

 

[Unknown]

Well said!

I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.

I would like to know, is there another program that will filter outbound
traffic and is better than ZA?

For the average homeuser, the Windows Firewall in XP does a fantastic job
at its core mission and is really all you need if you have an 'real-time'
anti-virus program, [another firewall on your router or] other edge
protection like SeconfigXP and practise safe-hex.
The windows firewall deals with inbound protection and therefore does not
give you a false sense of security. Best of all, it doesn't implement lots
of nonsense like pretending that outbound traffic needs to be monitored.

At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx

Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."

Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater¡Xit¡¦s a gimmick that only gives
the
impression of improving your security without doing anything that actually
does improve your security."

In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135, 137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html