Microsoft XP Firewall

[sunfire2kxtreme]

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

 

[Tom Lake]

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

Because the other firewall is testing before the XP firewall does.

Tom Lake

 

[Rifleman]

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

the freeware firewall you installed TELLS you it's done it, the XP firewall
does NOT tell you it's done it, it just does the job quietly.

 

[sunfire2kxtreme]

-----Original Message-----

"sunfire2kxtreme" <[email protected]>
wrote in message

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.
==========================================================
Because the other firewall is testing before the XP
firewall does.

Tom Lake

Capaci Occasio

==========================================================

Then with what you have just replied, then why did the XP
firewall never ask if it was ok to download, access the
Road Runner Messenger, software updates, ...... as the
free downloaded software does?

 

[sunfire2kxtreme]

-----Original Message-----

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

==========================================================
==========================================================

Subject: Re: Microsoft XP Firewall
From: "Rifleman" <[email protected]> Sent: 1/26/2004
4:09:40 AM

"sunfire2kxtreme" <[email protected]>
wrote in message


If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

the freeware firewall you installed TELLS you it's done
it, the XP firewall
does NOT tell you it's done it, it just does the job
quietly.

==========================================================
==========================================================

Subject: Re: Microsoft XP Firewall
From: "sunfire2kxtreme"
<[email protected]> Sent: 1/26/2004
4:19:45 AM

-----Original Message-----

"sunfire2kxtreme" <[email protected]>
wrote in message

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.
==========================================================
Because the other firewall is testing before the XP
firewall does.

Tom Lake

Capaci Occasio

==========================================================

Then with what you have just replied, then why did the XP
firewall never ask if it was ok to download, access the
Road Runner Messenger, software updates, ...... as the
free downloaded software does?

==========================================================
==========================================================

Further more, if the XP firewall does it for you, why
does it not ask if you want to block it or not?

From what it has done, it let's it in and does not ask if
you what it or not.

 

[Ramesh [MVP]]

In XP ICF you can enable logging. ICF does not tell you about blocked connections [via UI]. Evertthing is stored in a log called "pfirewall.log" if you have enabled logging.

See, About Firewalls - Windows XP ICF:
http://www.mvps.org/sramesh2k/firewall.htm

--
Ramesh - Microsoft MVP
http://www.mvps.org/sramesh2k
-------------------------------------------
Prevent malware from being installed - Part 2:
http://www.mvps.org/sramesh2k/MalwareDefence_Example.htm
-------------------------------------------

If the firewall in XP really work, then why after
downloading a free firewall has it blocked over 160 hits
in less than 12 hours.

The XP firewall is still enabled, too.

 

[Alan]

Cripes, are you always this annoying and argumentative in real life? People
have replied to your original question.

If you don't like the way the XP firewall works, just disable it, use your
free downloaded one, and stop bitching.

End of story.

Alan

 

[Marc Reynolds [MSFT]]

ICF won't bloxk inbound traffic that is in response to traffic initiated
from outbound traffic:

See
http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/Plan/icf.asp
The primary security policy that ICF enforces through stateful packet
filtering contains three rules:

a.. Any packet that matches an established connection flow is forwarded.
b.. A sent packet that does not match an established connection flow
creates a new entry in the connection flow table and is forwarded.
c.. A received packet that does not match an established connection flow
is dropped.
This policy allows for normal client Internet access (such as Web browsing)
while preventing packets that are not related to such access from being
delivered to the network stack. There are provisions for users to modify
these rules in order to open specific ports (creating a static filter) so
that services, such as a Web server, may be run behind the firewall.

Beyond the security policy, ICF also performs additional structural checks
on TCP packets. These checks include quickly dropping packets that have
impossible flag combinations (such as both SYN and FIN set on a single
packet), and enforcing the TCP three-way handshake for open ports. The
former greatly reduces processing overhead when faced with attacks based on
sending large numbers of random packets, while the latter hampers various
scanning techniques.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Cerridwen]

Cripes, are you always this annoying and argumentative in real life?
People have replied to your original question.

If you don't like the way the XP firewall works, just disable it, use
your free downloaded one, and stop bitching.

End of story.

Alan

Well said, Alan! I think it's being argumentative for argument's sake.
Obviously got nothing better to do.

 

[Marc Reynolds [MSFT]]

For a better understanding of how ICF works see

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/prodtechnol/winxppro/Plan/icf.asp

--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.