Re: Windows Firewall

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 10/30/04


Date: Sat, 30 Oct 2004 09:29:21 -0600

John Barton wrote:
> Using XP Home with Microsoft firewall installed and turned on. Have
> cable isp service which is on all the time. Is the XP firewall safe
> to use under these conditions or should I turn it of and install
> another commercial firewall?

   WinXP's built-in firewall is adequate at stopping incoming attacks,
and hiding your ports from probes. What WinXP SP2's firewall does not
do, is protect you from any Trojans or spyware that you (or someone
else using your computer) might download and install inadvertently.
It doesn't monitor out-going traffic at all, other than to check for
IP-spoofing, much less block (or at even ask you about) the bad or the
questionable out-going signals. It assumes that any application you
have on your hard drive is there because you want it there, and
therefore has your "permission" to access the Internet. Further,
because the Windows Firewall is a "stateful" firewall, it will also
assume that any incoming traffic that's a direct response to a
Trojan's or spyware's out-going signal is also authorized.

    ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even the commercially
available Symantec's Norton Personal Firewall is superior by far,
although it does take a heavier toll of system performance then do
ZoneAlarm or Sygate.

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever count on 
having
both at once. - RAH


Relevant Pages

  • Re: Service Pack 1 & 2
    ... but enable to install because of service pack 2. ... >> I recently reinstalled Windows XP home on a new hard disk because the ... >> I tried to install service pack 1 but was rejected from doing so. ... > Why you should use a computer firewall.. ...
    (microsoft.public.windowsupdate)
  • Re: Feedback solicited - best way to harden a mail/web server?
    ... Was the system protected by a properly configured firewall? ... it's not a bad "starting point" and it can generate an IPtables rule ... > nor is there a web or ftp server; aside from that I haven't tried to secure ... Before I'll install some nifty application ...
    (comp.os.linux.security)
  • Re: I THINK I HAVE A VIRUS MY ANTIVIRUS SCAN WONT EVEN RUN
    ... install some thing ells like ez antivirus or antivier both ahve free triles ... > your computer online - meaning you likely have usernames and passwords ... > Why you should use a computer firewall.. ... > The system restore feature is a new one - first appearing in Windows ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Downloading updates in advance
    ... Did you enable the firewall in XP ... internet after a fresh install and then go to Windows Updates. ... The Microsoft Windows system contains invalid registry entries and your ...
    (microsoft.public.windowsxp.security_admin)
  • The Trackers First Review Response
    ... Here are the "Malicious Hackers Best ... > hidden firewall applicationto protect their Virtual Private ... > your system for a Backdoor, Trojan Horse, Virus, or Worm until your ... Typically once a system is compromised, there is little need to install ...
    (comp.security.firewalls)