windows firewall

G

Guest

When I used Norton Internet Security I knew how to allow trusted programmes
to connect to the Internet. I got rid of that and now just use Windows
Firewall. Can I allow programmes access in a similar way? Or does Windows
Firewall function in a different way?
 
G

Guest

Jackie D said:
When I used Norton Internet Security I knew how to allow trusted programmes
to connect to the Internet. I got rid of that and now just use Windows
Firewall. Can I allow programmes access in a similar way? Or does Windows
Firewall function in a different way?

Yes, you can do through the Exceptions Tab on the Firewall, but it is better
to use a third_party firewall with a capability to control Inbound and
Outbound Traffics like ZA and Comdo or Keiro.
Here is a link for ZA:
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html
HTH.
Let us know.
nass
 
B

Bruce Chambers

Jackie said:
When I used Norton Internet Security I knew how to allow trusted programmes
to connect to the Internet. I got rid of that and now just use Windows
Firewall. Can I allow programmes access in a similar way?


No need. WinXP's built-in firewall allows everything on your hard drive
access to the Internet, and without bothering to let you know, as well.
(Of course, you also have no control.)

Or does Windows
Firewall function in a different way?


The Windows Firewall included with SP2, while vastly superior to
the original ICF in terms of visibility, usability and configurability,
is still rather lacking, as a solid security component. It still can't
supplant 3rd-party solutions, nor is it intended to do so; rather, it's
intended to complement them. And, like the original ICF, it will not
monitor out-going traffic.

WinXP's built-in firewall is usually adequate at stopping incoming
attacks, and hiding your ports from probes. What WinXP SP2's firewall
does not do, is protect you from any Trojans or spyware that you (or
someone else using your computer) might download and install
inadvertently. It doesn't monitor out-going traffic at all, other than
to check for IP-spoofing, much less block (or at even ask you about) the
bad or the questionable out-going signals. It assumes that any
application you have on your hard drive is there because you want it
there, and therefore has your "permission" to access the Internet.
Further, because the Windows Firewall is a "stateful" firewall, it will
also assume that any incoming traffic that's a direct response to a
Trojan's or spyware's out-going signal is also authorized.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even the commercially
available Symantec's Norton Personal Firewall is superior by far,
although it does take a heavier toll of system performance then do
ZoneAlarm or Sygate.

Having said that, it's important to remember that firewalls and
anti-virus applications, which should always be used and should always
be running, while important components of "safe hex," cannot, and should
not be expected to, protect the computer user from him/herself.
Ultimately, it is incumbent upon each and every computer user to learn
how to secure his/her own computer.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
B

Bruce Chambers

nass said:
Yes, you can do through the Exceptions Tab on the Firewall, but it is better
to use a third_party firewall with a capability to control Inbound and
Outbound Traffics like ZA and Comdo or Keiro.
Here is a link for ZA:
http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html
HTH.
Let us know.
nass

I think you'll find that the Exception list is for allowing/controlling
*inbound* connections only, and will have no affect upon outbound
connections.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
B

B. Nice

Having said that, it's important to remember that firewalls and
anti-virus applications, which should always be used and should always
be running, while important components of "safe hex," cannot, and should
not be expected to, protect the computer user from him/herself.

Sorry, but you need to somehow rephrase this self-contradictory
nonsense before copy/pasting it the next time, because expecting to be
protected is of course the *exact reason* why computer users install
them. Your statement boils down to "Use protective software, but don't
expect it to work when you need it".

That is obviously nonsense (except from the fact that crap like
software firewalls in fact won't protect you) and it does'nt become
right just by being repeatedly copy/pasted.
 
B

Bruce Chambers

B. Nice said:
Sorry, but you need to somehow rephrase this self-contradictory
nonsense before copy/pasting it the next time, because expecting to be
protected is of course the *exact reason* why computer users install
them. Your statement boils down to "Use protective software, but don't
expect it to work when you need it".

That is obviously nonsense (except from the fact that crap like
software firewalls in fact won't protect you) and it does'nt become
right just by being repeatedly copy/pasted.

You really shouldn't project your lack of reading comprehension upon
others, you know.

What do suggest? Your ususal "You don't need any other protection?"


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
G

Guest

Bruce Chambers said:
I think you'll find that the Exception list is for allowing/controlling
*inbound* connections only, and will have no affect upon outbound
connections.

Does this apply to all applications/Programs, such as FTP, Games, SSH,
RPD...etc..
The Op does not need to Configure the Firewall to allow access to those
pre-mentioned Programs or assign a port for example?.

And what make the Windows Firewall Vastly Superior than it' predecessor
which it doesn't suite it, if it is that not good!.
ZA,Saygate and kerio or any third party Firewall not that easy to configure
as you mentioned. Any Firewall need to be configured according to the
User/system needs and applications access (updates).
You can have whatever Protection software and still be compromised if not
been configured to protect that user/System from the Outer World wide web.

All in all Common sense with precautions can lead to safer/protected
computer and less risk.
nass
 
B

B. Nice

You really shouldn't project your lack of reading comprehension upon
others, you know.

Which part of

"while important components of 'safe hex', cannot, and should not be
expected to, protect the computer user from him/herself."

did I not comprehend?
What do suggest? Your ususal "You don't need any other protection?"

It seems like you are the one having a comprehension problem.
 
G

Guest

Greetings Bruce,
I have chosen to use AVG Firewall and Anti-virus software - when it is
working my laptop and base computer communicate with each other better than
with Windows Firewall. My problem is getting Windows Firewall to remain
disabled. Windows always seems to want to turn Windows Firewall back on
interfering with the operation of AVG Firewall. Can you offer any advise how
to have Windows Firewall remain off?
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Top