Sunbelt Kerio Personal Firewall

[Renan]

sudo rm -rf /home/elaich:

2.1.5 is the perfect firewall except for a problem handling fragmented
packets. Go here to get something that will run behind 2.1.5 and eliminate
that problem - CHX Packet Filter.

http://www.idrci.net/

Sorry if this is a silly question, but how to configure CHX Packet
Filter for handling fragmented packets? The interface is just too
technical for me (I don't know much about networking and TCP/IP).

 

[Renan]

sudo rm -rf /home/:

YES. At least it does here.

Working well here. Will have to test if firewall interferes with [both
OT, since they're commercial software] VMware and Virtual PC, which do
strange things to network interfaces. (VMware installs its own "virtual
network" devices, Virtual PC uses a "loopback" device).

 

[Kerodo]

sudo rm -rf /home/elaich:


Sorry if this is a silly question, but how to configure CHX Packet
Filter for handling fragmented packets? The interface is just too
technical for me (I don't know much about networking and TCP/IP).

CHX will do an analysis of any and all fragmented packets on it's own
without any configuration from you. You can, if you really want to,
turn on an option that will deny ALL fragmented packets, however, this
is probably not wise or necessary.

Best thing to do is a quick study of the online docs. This will explain
the basics to you. In it's default, out of the box configuration, CHX
does nothing. You need to import the sample rule set to start off with,
then also make sure you right click on the Interface section and select
Properties, then turn on stateful inspection (SPI) for all protocols
(TCP/UDP/ICMP). Without this it's likely that CHX will do no filtering
at all. Use the sample rule set to start with, modify as needed for any
inbound you need with force allow rules. You may not need any unless
you do p2p or have programs that operate as servers. You will also want
to turn on logging as well in Interface Properties.

Once you get the hang of it, it's really quite simple rule-wise. All
you need are just a couple rules and the options turned on (SPI) in
Interface Properties and you're good. But again, the online docs are a
good place to look to start off with.

 

[Helen]

CHX will do an analysis of any and all fragmented packets on it's own
without any configuration from you. You can, if you really want to,
turn on an option that will deny ALL fragmented packets, however, this
is probably not wise or necessary.

Best thing to do is a quick study of the online docs. This will
explain the basics to you. In it's default, out of the box
configuration, CHX does nothing. You need to import the sample rule
set to start off with, then also make sure you right click on the
Interface section and select Properties, then turn on stateful
inspection (SPI) for all protocols (TCP/UDP/ICMP). Without this it's
likely that CHX will do no filtering at all. Use the sample rule set
to start with, modify as needed for any inbound you need with force
allow rules. You may not need any unless you do p2p or have programs
that operate as servers. You will also want to turn on logging as
well in Interface Properties.

Once you get the hang of it, it's really quite simple rule-wise. All
you need are just a couple rules and the options turned on (SPI) in
Interface Properties and you're good. But again, the online docs are
a good place to look to start off with.

What's this? : Download the CHXT **TRIAL**** products. (from the site).
So, is it or is it NOT FREEWARE?

 

[CharlieDontSurf]

What's this? : Download the CHXT **TRIAL**** products. (from the site).
So, is it or is it NOT FREEWARE?

Freeware:

http://www.idrci.net/products/spfpur.html

 

[Kerodo]

What's this? : Download the CHXT **TRIAL**** products. (from the site).
So, is it or is it NOT FREEWARE?

It is freeware. Requires you to register online, then you are sent a
serial/key via email. No strings attached.

 

[Renan]

sudo rm -rf /home/Renan:

Working well here. Will have to test if firewall interferes with [both
OT, since they're commercial software] VMware and Virtual PC, which do
strange things to network interfaces. (VMware installs its own "virtual
network" devices, Virtual PC uses a "loopback" device).

I set Kerio to "gateway mode" and Virtual PC seems to be happy.

 

[public.email]

There still appears to be a freeware version.

http://www.sunbelt-software.com/Kerio.cfm

Have a look.

http://www.jetico.com/jpfirewall.htm

 

[Buckbeak]

It is freeware. Requires you to register online, then you are sent a
serial/key via email. No strings attached.

An email identity is worth money. It can be sold to third parties.
Requiring one is requiring value to be supplied. Even if you currently
have a policy against selling email addresses, the company that buys you
may not.

 

[Kerodo]

An email identity is worth money. It can be sold to third parties.
Requiring one is requiring value to be supplied. Even if you currently
have a policy against selling email addresses, the company that buys you
may not.

If you're paranoid then don't use it. Simple enough...

 

[BoB]

(e-mail address removed) wrote in

Version 4 was a boondoggle of bloat and bugs. No, unless Sunsoft has
cleaned it up since taking it over.

2.1.5 is the perfect firewall except for a problem handling fragmented
packets. Go here to get something that will run behind 2.1.5 and eliminate
that problem - CHX Packet Filter.

http://www.idrci.net/

I haven't noticed this mentioned in this thread:

.. Operating Systems supported:
? Windows 2000
? Windows XP
? Windows 2003

Not for Win98. Like WMF, Win98 w/Kerio is probably not
vulnerable, assuming you have Safehex Practices down pat.

I recommend reading the helpful tips from following sites:

http://claymania.com/safe-hex.html
http://www.wilders.org/
http://212.117.138.119/uzi/eng/safe.html
http://www.pcflank.com/

BoB

 

[Ron May]

An email identity is worth money. It can be sold to third parties.
Requiring one is requiring value to be supplied. Even if you currently
have a policy against selling email addresses, the company that buys you
may not.

That's why it makes sense to use a disposable email address like
dodgeit.com or any number of others for such registration purposes.
If everybody followed a few common sense anti-spam strategies, then
the potential "spammers" would be shelling out cash for lists that are
mostly garbage (and that's a GOOD thing!) <g>

 

[Renan]

sudo rm -rf /home/Renan:

Working well here. Will have to test if firewall interferes with [both
OT, since they're commercial software] VMware and Virtual PC, which do
strange things to network interfaces. (VMware installs its own "virtual
network" devices, Virtual PC uses a "loopback" device).

Virtual PC worked OK, but VMware gave a blue screen
(DRIVER_IRQL_NOT_LESS_OR_EQUAL) and a memory dump[1]. Google Desktop
also choked on the firewall and I had to reinstall it.

[1] What can I do with a "memory dump"? I would like to know what driver
caused the error. Reading it with hex editor is not very enlightening.

 

[Renan]

sudo rm -rf /home/Buckbeak:

An email identity is worth money. It can be sold to third parties.
Requiring one is requiring value to be supplied. Even if you currently
have a policy against selling email addresses, the company that buys you
may not.

www.mailinator.com