Re: Agnitum Outpost blocking everything

Art wrote:
On Wed, 31 Aug 2005 00:05:34 GMT, "Beauregard T. Shagnasty" <a.nony.mous@xxxxxxxxxxxxxxx> wrote:

Malware can easily defeat sw firewalls. 

Regarding that, do you know if said malwares generally target
only the prominent firewalls (Norton, McAfee, ZoneAlarm..) or do
they look for all the others (Kerio, Sygate, etc), too?


I wasn't speaking of any particular malware. I was pointing out the
 faulty logic of trusting sw firewalls to alert to Trojans.

Well, I thought you could provide some kind of example. Y'know, cite and defend your statement? :-)

A sw firewall isn't particulaly demanding of RAM and other
system resources nowdays, so if it gives users the warm fuzzies
to use one, by all means use one. But it's unnecesary ... just
as realtime av is unnecessary.


Probably still better than nothing, as certainly all malware
won't be disabling them.


If it gives you the warm fuzzies :) It doesn't do anything for me.
I have Sygate installed and rarely use it.

I don't need the warm fuzzies, either. <g> I'm suggesting it for those with small amount of clue.

The point is that if your realtime av or your sw fireall go "ding",
you're doing something wrong. So fix _that_ problem rather than screwing around.

You can use them for other pertinent reasons too, such as alerting you each time Internet Exploder starts up. I never use the thing, but some years ago I was testing a piece of trialware and had forgotten about it. A few days after the 30-day period, I started the app, and it immediately opened IE, and went to a web page with my OE default email address attached to the URL. Since that day, IE is on "the list."

Now, I don't use OE either, so the default address was a mung. But newbies don't know to do that.

The firewalls do have their uses.

--
   -bts
   -This space intentionally left blank.
.

Relevant Pages

  • Re: Application based FW but add grant/deny rules per application?
    ... I did try Kerio and, so far, I like it a lot. ... Sygate is pretty equivalent too but offers more tuning ... Sygate has a custom deny rule at the level of individual ports or IP ... > block a port it is blocked for all applications. ...
    (comp.security.firewalls)
  • Re: Regarding sygate and Kerio (TPF)
    ... I've had pretty great results with Kerio Free pfw v2.14. ... tests using TaskInfo 2002 Sygate uses over twice the ram, ... >> How many umbrellas does one person need on a rainy day? ... >> One firewall is adequate and this is echoed in every software ...
    (comp.security.firewalls)
  • Re: firewall & also firewall in xp - home user
    ... I think Kerio actually is quite a bit better at creating rules, ... I wish it had the logging of Sygate though. ... alternate choice of port 80 if that is what it detected it trying to access. ... allows port 3389 outbound to anywhere, but also port 3389 inbound from ...
    (microsoft.public.security)
  • Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... ZoneAlarm 2.6.362 I tried Kerio Personal Firewall 2.1.4, Agnitum Outpost ... and Sygate Personal Firewall 5.0 Build 1117. ...
    (comp.security.firewalls)
  • Re: Free Firewalls: ZoneAlarm vs Tiny Personal Firewall
    ... ZoneAlarm 2.6.362 I tried Kerio Personal Firewall 2.1.4, Agnitum Outpost ... and Sygate Personal Firewall 5.0 Build 1117. ...
    (comp.security.firewalls)