ZoneAlarm Free 4.5

[donutbandit]

I can't think of any reason why I would want to. ZA works fine for
me, doesn't slow my PC down and does what it says on the tin.

It's grown to almost a 5 meg download (twice the size of Kerio). Why all
that bloat?

No idea but I haven't read anything that suggests anything malicious.

And I haven't read anything that suggests that it isn't.

I have a healthy suspicion of any software that needs to phone home or stay
connected to home. The first question is "why?" What information is being
exchanged, and just who is looking at it?

Why would using Kerio make me "do better?" Does it do anything that
Zonealarm doesn't, that I would find useful? I couldn't find anything
when I tried it before and went back to Zonealarm.

Does Zone Alarm allow you to shut down specific ports, in the event of a
new worm? It didn't the last time I used it. Does it allow you to select an
application and specify which ports it can and cannot use? It didn't the
last time I tried it.

At any rate, Zone Alarm free is actually crippleware, not freeware. I
always wonder who's paying the bills where crippleware is concerned, and
how.

Each to their own..

You got that right.

 

[George]

It's grown to almost a 5 meg download (twice the size of Kerio). Why all
that bloat?

Does the download size reflect the resources needed to run it? I don't know
but it certainly doesn't seem to have affected my PC performance.

And I haven't read anything that suggests that it isn't.

I have a healthy suspicion of any software that needs to phone home or stay
connected to home. The first question is "why?" What information is being
exchanged, and just who is looking at it?

I'd be the same if it wasn't firewall software, don't know why! If it was
something dodgy I believe all the techy people who are heavily into online
security/privacy stuff would have found out by now. Can't be that hard for
someone with the knowhow to see what the connection home is doing.

Does Zone Alarm allow you to shut down specific ports, in the event of a
new worm? It didn't the last time I used it. Does it allow you to select an
application and specify which ports it can and cannot use? It didn't the
last time I tried it.

No but the point is I don't want to close them manually. My guess it it
closes them all and opens certain ones depending on what software you need
to allow access. I don't need to change the port any software uses so I
don't need that option.

At any rate, Zone Alarm free is actually crippleware, not freeware. I
always wonder who's paying the bills where crippleware is concerned, and
how.

Crippleware to me is software that limits the actual use the software is
for, such as an anti virus package that only checks for x amount of viruses,
or a download manager that didn't resume. ZoneAlarm free does what I need
it to. I think what pays the bills are all those who buy the Pro version.

I'm not using it blindly by the way. I've looked at both arguments, read
reviews and feel it is fine for now.

 

[Rob]

i notice ver 4.5 uses 4mb more memory..than the last ver 37.211,
on my system, its getting bigger...

also this feature is in the "pro" version, "ID Lock", keeps your
confidential personal information private from ID thieves and
Internet predators,

does this mean our confidential personal information is exposed in
the free version? oh my, I dont feel safe anymore,

regards
stan

They just want to scare you into buying the Pro version.

Ron

 

[Bubba]

-----BEGIN PGP SIGNED MESSAGE-----

I have to agree, absolutely. Advice is spot on. Make use of HOSTS file
and use Kerio Personal firewall (v 2.1.5 NOT the new one which has
departed substantially from the 'lean' philosophy which characterises
v2.1.5). It is very configurable, easy to use, and uses minimal system
resources. One word of warning: uninstall Zone Alarm first before
installing KPF. And make sure that you thoroughly uninstall Zone Alarm
and reboot.

Got to rush, don't want to be...
LateforWork/

Would you or anybody else on the group know if there has been any
independent comparisons between the two programs that may be available on
the web to view?

Bubba


~~~
This PGP signature only certifies the sender and date of the message.
It implies no approval from the administrators of nym.alias.net.
Date: Thu Nov 20 07:33:48 2003 GMT
From: (e-mail address removed)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQEVAwUBP7xuXU5NDhYLYPHNAQHf8gf+Jl16pI5Faxlh4W+lVeVF8iVzaQdnpEo8
naucO7mjNhsX8kN0pipw9K5AQOyIVNpK1FtuAu1J0m9nWk+zXuTSP8FhTFdYGJ5J
BJzLETz4/PT621kJ8VWZNtyZOxO0gR9h/k88EDFr+zZEWeDwFPFslAtqjSFSLQJ3
ovbydLUZdxs5WPha1eWEnnVPWwWt2xZ5isY3uY1JLgenUc46cOitECnVFUBGAQWi
brzkWvBuZVJna3PFtBiZUNQrmxxclqGqOCIK2xnFUQ5eNQfu+lI/7tMVyj9mJ/Rl
MMJ/Hdr7zHZQfC8/ODaL1MVuThvX2Jb9j+X3KdNcHEcTXp2ENg9wsQ==
=bV4s
-----END PGP SIGNATURE-----

 

[LateforWork]

-----BEGIN PGP SIGNED MESSAGE-----



Would you or anybody else on the group know if there has been any
independent comparisons between the two programs that may be available on
the web to view?

Bubba

Don't know about the other main correspondent to this thread but i
guess, like me, he's probably tried both. I've been in the Net since
late 1995 and used ZA when it came out. Then I tried Tiny PFW and then
Kerio PF. If you want a no-brainer then ZA does the job. However, it
also consumes plenty of system resources.

If you want great configurability and a fast loading, efficient firewall
use KPF. There's plenty of nice features built-insuch as:


* automatic detection of any program that tries to access the internet
* notification if such installed programs get changed (good alerts for
possible trojans)
* ability to block specific ports/protocols/incoming/outgoing

Lots more! Try it v2.1.5 that is!

LateforWork/

 

[Rob]

Don't know about the other main correspondent to this thread but i
guess, like me, he's probably tried both. I've been in the Net since
late 1995 and used ZA when it came out. Then I tried Tiny PFW and then
Kerio PF. If you want a no-brainer then ZA does the job. However, it
also consumes plenty of system resources.

If you want great configurability and a fast loading, efficient
firewall
use KPF. There's plenty of nice features built-insuch as:


* automatic detection of any program that tries to access the internet
* notification if such installed programs get changed (good alerts for
possible trojans)
* ability to block specific ports/protocols/incoming/outgoing

Lots more! Try it v2.1.5 that is!

LateforWork/

I agree. On my old PII computer, ZA worked but was slower and seemed to eat
up a lot more system resources.

Kerio was a lot faster and gave me a lot more control. (e.g. I could
prevent IE from connecting or receiving connect requests on certain ports
etc).

That being said, if you not that experienced with setting up firewalls, I
would stick with ZA. It is pretty much a no brainier to set up.

In my view, it really depends on how knowledgeable you are!

Rob

 

[George]

In my view, it really depends on how knowledgeable you are!

Or need/want to be on that particular subject. Still all this talk has got
me to download Kerio again. Will maybe do some research on it.

 

[LateforWork]

Or need/want to be on that particular subject. Still all this talk has got
me to download Kerio again. Will maybe do some research on it.

Let me know how you get on! And try and get the v2.1.5!

I'm pretty sure there's some useful helpgroups I went to, that'll give
you some good basic settings for 'filter rules' to get you started.
Maybe do a google search. FWIW IMO it's really not that difficult and
you'll look back and be pleased with yourself for making the small
effort. It's a nice feeling that you're in control of your own PC's
security.

Got to go now, or else I'll be...
LateforWork/

 

[George]

Let me know how you get on! And try and get the v2.1.5!

I'm pretty sure there's some useful helpgroups I went to, that'll give
you some good basic settings for 'filter rules' to get you started.
Maybe do a google search. FWIW IMO it's really not that difficult and
you'll look back and be pleased with yourself for making the small
effort. It's a nice feeling that you're in control of your own PC's
security.

If you can remember the URL of the helpgroups or a good straight forward
tutorial let me know. Stuck already and can't find the answer on Google
yet..

 

[LateforWork]

If you can remember the URL of the helpgroups or a good straight forward
tutorial let me know. Stuck already and can't find the answer on Google

yet..

Look in the NF "comp.security.firewalls" I've just looked there and
there are quite a few postings about Kerio and filter rules.

 

[donutbandit]

If you can remember the URL of the helpgroups or a good straight forward
tutorial let me know. Stuck already and can't find the answer on Google
yet..

Here a page with a lot of Kerio info:

www.geocities.com/yosponge

 

[George]

Look in the NF "comp.security.firewalls" I've just looked there and
there are quite a few postings about Kerio and filter rules.

Cheers. Off for a read.

 

[George]

Google


Look in the NF "comp.security.firewalls" I've just looked there and
there are quite a few postings about Kerio and filter rules.

Cheers. Off for a read.[/QUOTE]

Hmm, mainly complaints or problems.

 

[George]

Here a page with a lot of Kerio info:

www.geocities.com/yosponge

Thanks.

 

[Fly Bye Nite]

If you can remember the URL of the helpgroups or a good

Hmm, mainly complaints or problems.

Yeah, go figure - ehh? (;

 

[donutbandit]

I used to read that group religiously, but now I've unsubscribed. It's
mainly a few zealots any more who all vigorously defend their personal
favorite firewall, and total newbies. It's really gone downhill for about
the last year.

 

[Bubba]

-----BEGIN PGP SIGNED MESSAGE-----

On Thu, 20 Nov 2003, (e-mail address removed) wrote:

Don't know about the other main correspondent to this thread but i
guess, like me, he's probably tried both. I've been in the Net since
late 1995 and used ZA when it came out. Then I tried Tiny PFW and then
Kerio PF. If you want a no-brainer then ZA does the job. However, it
also consumes plenty of system resources.

If you want great configurability and a fast loading, efficient firewall
use KPF. There's plenty of nice features built-insuch as:


* automatic detection of any program that tries to access the internet
* notification if such installed programs get changed (good alerts for
possible trojans)
* ability to block specific ports/protocols/incoming/outgoing

Lots more! Try it v2.1.5 that is!

LateforWork/

Thank y0u for y0ur input on this. I've never really had problems with ZA
but I know of those that have.
I plan on giving it a try.

Bubba




~~~
This PGP signature only certifies the sender and date of the message.
It implies no approval from the administrators of nym.alias.net.
Date: Sat Nov 22 02:19:11 2003 GMT
From: (e-mail address removed)

-----BEGIN PGP SIGNATURE-----
Version: 2.6.3ia
Charset: noconv

iQEVAwUBP77HoU5NDhYLYPHNAQE+Ggf+LTheZvGVyNF1kvA5Z9ka+twAOWbeullD
X8n/CwZAL6QPt3Oo559NvSuWkz3/IRA3IYWKfOqiGYrXJ1QVGpaRe9tgkrW+9vNt
2Dw3VhDR+MyQz1/P2sdiNnopHNipIED86Bl/qld/l8GJGziC+VzmxEgNSWlqNlxP
AgDeB9EDSdVjQmhJdVVXFk4O2cM2ENvwKU+2UTucXBeQlTNj+K4gmRuIlIUT+n6v
QB64CwfsraGTV50VwDv+qrTVLaE8xtWy0Ri6L3M1v3WFw/vOAcD6xM9XhZxTzuKM
ZLu9iCknEPfGh4CIK5gmk1AOV0iuuKfC6BmavncGj9hPIIB/1g3GEQ==
=djWN
-----END PGP SIGNATURE-----

 

[John Corliss]

LateforWork wrote:


Thank y0u for y0ur input on this. I've never really had problems with ZA
but I know of those that have. I plan on giving it a try.

FWIW My experiences are similar to Lateforwork's. I also highly
recommend Kerio 2.1.5 for the same reasons given. I never had problems
with ZA, but for now I prefer Kerio and it's doing the job.
Unfortunately, the new version (4.0.8) of Kerio doesn't seem to be
as highly recommended as the 2.1.5 version and after a period of time
becomes more limited. Still, the limitations may not be that critical
if you're not using a server type operating system. From the online
PDF manual (http://www.kerio.com/dwn/kpf4-en.pdf) for that version:
____________________________________
"The same installation package is used for both version. After
installation the product behaves as a 30-days trial version (full
version limited by time). If the product is not registered by the
expiration date, it becomes freeware. The product becomes a full
version after license purchase and product registration (for detailed
information refer to chapter 2.3). Freeware versions are limited by
the following restrictions:

• It is available for personal and/or noncommercial use only.

• Web content filtering, including its logs and statistics, is not
available (see chapter 9).

• It cannot be used at Internet Gateways (refer to chapter 4.3)

• Logs cannot be sent to Syslog server (details in chapter11.3).

• Configuration cannot be protected by a password and it is not
possible to access and administer the firewall remotely.

• It cannot be used on server type operating systems, such as Windows
NT Server, Windows 2000 Server and Windows Server 2003. If the trial
version was installed on any of these systems, the Personal Firewall
Engine service will be disabled by the expiration date and it will not
be able to restore it."
____________________________________

I don't know whether or not attempting to access these features after
the limitations are in place leads to a nag screen, since I'm still
using 2.1.5.

 

[Rob]

FWIW My experiences are similar to Lateforwork's. I also highly
recommend Kerio 2.1.5 for the same reasons given. I never had problems
with ZA, but for now I prefer Kerio and it's doing the job.
Unfortunately, the new version (4.0.8) of Kerio doesn't seem to be
as highly recommended as the 2.1.5 version and after a period of time
becomes more limited. Still, the limitations may not be that critical
if you're not using a server type operating system. From the online
PDF manual (http://www.kerio.com/dwn/kpf4-en.pdf) for that version:
____________________________________
"The same installation package is used for both version. After
installation the product behaves as a 30-days trial version (full
version limited by time). If the product is not registered by the
expiration date, it becomes freeware. The product becomes a full
version after license purchase and product registration (for detailed
information refer to chapter 2.3). Freeware versions are limited by
the following restrictions:

• It is available for personal and/or noncommercial use only.

• Web content filtering, including its logs and statistics, is not
available (see chapter 9).

• It cannot be used at Internet Gateways (refer to chapter 4.3)

• Logs cannot be sent to Syslog server (details in chapter11.3).

• Configuration cannot be protected by a password and it is not
possible to access and administer the firewall remotely.

• It cannot be used on server type operating systems, such as Windows
NT Server, Windows 2000 Server and Windows Server 2003. If the trial
version was installed on any of these systems, the Personal Firewall
Engine service will be disabled by the expiration date and it will not
be able to restore it."
____________________________________

I don't know whether or not attempting to access these features after
the limitations are in place leads to a nag screen, since I'm still
using 2.1.5.

John,

Does v2.1.5 have any features that the FREEWARE version of 4.08 does not?
e.g. Internet Gateways?

Rob

 

[John Corliss]

John,

Does v2.1.5 have any features that the FREEWARE version of 4.08 does not?
e.g. Internet Gateways?

Rob

Good question, Rob, but sorry I can't help you there. I'm just
continuing with 2.1.5 because I'm getting to where I loath doing
updates. Hell, I frankly don't even know what an internet gateway is
anymore.