Vista Firewall outbound control

R

Riccardo

Hi,
Vista FW with advanced security comes with an outbound traffic default
setting "allow everything which is not denied". I think this is completely
useless, because the main reason for outbound traffic filter is to block
UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule to
deny an unknown program/destination port. On the other hand if I change the
outbound setting to "block everything that does not match a rule" it is
nearly impossible to design a rule for legitimate programs because, as far
as I understand, there is no "display notification" for outbound breaking
rule, and it is not simple to know applications/services/ports of the
majority of legitimate applications (apart from browser mailer and few
others).
My question is: is there a way to have a kind of display notification of the
outbound offended rule with applications/services/ports of the offending
programs?
Thanks in advance
Riccardo
 
R

Richard Urban

You can use Vista Firewall Control (free) from
http://www.sphinx-soft.com/Vista/order.html

OR

You can use PCTools Firewall Plus (free) from
http://www.pctools.com/firewall/

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"Riccardo" <riccardo@nospam.it> wrote in message
news:%238EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
> Hi,
> Vista FW with advanced security comes with an outbound traffic default
> setting "allow everything which is not denied". I think this is completely
> useless, because the main reason for outbound traffic filter is to block
> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
> to
> deny an unknown program/destination port. On the other hand if I change
> the
> outbound setting to "block everything that does not match a rule" it is
> nearly impossible to design a rule for legitimate programs because, as far
> as I understand, there is no "display notification" for outbound breaking
> rule, and it is not simple to know applications/services/ports of the
> majority of legitimate applications (apart from browser mailer and few
> others).
> My question is: is there a way to have a kind of display notification of
> the
> outbound offended rule with applications/services/ports of the offending
> programs?
> Thanks in advance
> Riccardo
>
 
I

Ian Betts

I never use Windows firewall, They are inferiorat the best of times to a
good stand alone. I use the one that comes with Panda VP, nothing appears to
get past it and it can be set for in's and out's.



--
Ian

"Riccardo" <riccardo@nospam.it> wrote in message
news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
> Hi,
> Vista FW with advanced security comes with an outbound traffic default
> setting "allow everything which is not denied". I think this is completely
> useless, because the main reason for outbound traffic filter is to block
> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
> to
> deny an unknown program/destination port. On the other hand if I change
> the
> outbound setting to "block everything that does not match a rule" it is
> nearly impossible to design a rule for legitimate programs because, as far
> as I understand, there is no "display notification" for outbound breaking
> rule, and it is not simple to know applications/services/ports of the
> majority of legitimate applications (apart from browser mailer and few
> others).
> My question is: is there a way to have a kind of display notification of
> the
> outbound offended rule with applications/services/ports of the offending
> programs?
> Thanks in advance
> Riccardo
>
>
 
C

Charles W Davis

Ian,
That's your opinion.
I use the Windows Firewall with minimal outbound control (Vista), AVG
anti-virus and am behind a router/firewall. Nothing disasterous has gotten
past it for over three years on two computers that remain on 24/7. My
opinion is based solely on my experience.
"Ian Betts" <igb123@talktalk.net> wrote in message
news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>I never use Windows firewall, They are inferiorat the best of times to a
>good stand alone. I use the one that comes with Panda VP, nothing appears
>to get past it and it can be set for in's and out's.
>
>
>
> --
> Ian
>
> "Riccardo" <riccardo@nospam.it> wrote in message
> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>> Hi,
>> Vista FW with advanced security comes with an outbound traffic default
>> setting "allow everything which is not denied". I think this is
>> completely
>> useless, because the main reason for outbound traffic filter is to block
>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
>> to
>> deny an unknown program/destination port. On the other hand if I change
>> the
>> outbound setting to "block everything that does not match a rule" it is
>> nearly impossible to design a rule for legitimate programs because, as
>> far
>> as I understand, there is no "display notification" for outbound breaking
>> rule, and it is not simple to know applications/services/ports of the
>> majority of legitimate applications (apart from browser mailer and few
>> others).
>> My question is: is there a way to have a kind of display notification of
>> the
>> outbound offended rule with applications/services/ports of the offending
>> programs?
>> Thanks in advance
>> Riccardo
>>
>>
 
K

Kerry Brown

No firewall that runs locally on a computer can be relied upon to stop
outgoing traffic from malware. If the malware is running on the computer it
can alter anything on the computer including the firewall. The firewall can
make this hard to do but not impossible.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ian Betts" <igb123@talktalk.net> wrote in message
news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>I never use Windows firewall, They are inferiorat the best of times to a
>good stand alone. I use the one that comes with Panda VP, nothing appears
>to get past it and it can be set for in's and out's.
>
>
>
> --
> Ian
>
> "Riccardo" <riccardo@nospam.it> wrote in message
> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>> Hi,
>> Vista FW with advanced security comes with an outbound traffic default
>> setting "allow everything which is not denied". I think this is
>> completely
>> useless, because the main reason for outbound traffic filter is to block
>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
>> to
>> deny an unknown program/destination port. On the other hand if I change
>> the
>> outbound setting to "block everything that does not match a rule" it is
>> nearly impossible to design a rule for legitimate programs because, as
>> far
>> as I understand, there is no "display notification" for outbound breaking
>> rule, and it is not simple to know applications/services/ports of the
>> majority of legitimate applications (apart from browser mailer and few
>> others).
>> My question is: is there a way to have a kind of display notification of
>> the
>> outbound offended rule with applications/services/ports of the offending
>> programs?
>> Thanks in advance
>> Riccardo
>>
>>
 
I

Ian Betts

Ah but your router firewall is the one that you can rely on most IMHO.



--
Ian

"Charles W Davis" <Anthemwebs@lvcoxmail.com> wrote in message
news:A1C774F1-C82F-4F19-9BC1-D6DC6F66185B@microsoft.com...
> Ian,
> That's your opinion.
> I use the Windows Firewall with minimal outbound control (Vista), AVG
> anti-virus and am behind a router/firewall. Nothing disasterous has gotten
> past it for over three years on two computers that remain on 24/7. My
> opinion is based solely on my experience.
> "Ian Betts" <igb123@talktalk.net> wrote in message
> news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>>I never use Windows firewall, They are inferiorat the best of times to a
>>good stand alone. I use the one that comes with Panda VP, nothing appears
>>to get past it and it can be set for in's and out's.
>>
>>
>>
>> --
>> Ian
>>
>> "Riccardo" <riccardo@nospam.it> wrote in message
>> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>>> Hi,
>>> Vista FW with advanced security comes with an outbound traffic default
>>> setting "allow everything which is not denied". I think this is
>>> completely
>>> useless, because the main reason for outbound traffic filter is to block
>>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
>>> to
>>> deny an unknown program/destination port. On the other hand if I change
>>> the
>>> outbound setting to "block everything that does not match a rule" it is
>>> nearly impossible to design a rule for legitimate programs because, as
>>> far
>>> as I understand, there is no "display notification" for outbound
>>> breaking
>>> rule, and it is not simple to know applications/services/ports of the
>>> majority of legitimate applications (apart from browser mailer and few
>>> others).
>>> My question is: is there a way to have a kind of display notification of
>>> the
>>> outbound offended rule with applications/services/ports of the offending
>>> programs?
>>> Thanks in advance
>>> Riccardo
>>>
>>>
>
>
 
I

Ian Betts

But a good hardware and software firewall should stop the malware getting
in.



--
Ian

"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:1C1C7D21-37AC-4326-8BC3-CB4D570831A9@microsoft.com...
> No firewall that runs locally on a computer can be relied upon to stop
> outgoing traffic from malware. If the malware is running on the computer
> it can alter anything on the computer including the firewall. The firewall
> can make this hard to do but not impossible.
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Ian Betts" <igb123@talktalk.net> wrote in message
> news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>>I never use Windows firewall, They are inferiorat the best of times to a
>>good stand alone. I use the one that comes with Panda VP, nothing appears
>>to get past it and it can be set for in's and out's.
>>
>>
>>
>> --
>> Ian
>>
>> "Riccardo" <riccardo@nospam.it> wrote in message
>> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>>> Hi,
>>> Vista FW with advanced security comes with an outbound traffic default
>>> setting "allow everything which is not denied". I think this is
>>> completely
>>> useless, because the main reason for outbound traffic filter is to block
>>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a rule
>>> to
>>> deny an unknown program/destination port. On the other hand if I change
>>> the
>>> outbound setting to "block everything that does not match a rule" it is
>>> nearly impossible to design a rule for legitimate programs because, as
>>> far
>>> as I understand, there is no "display notification" for outbound
>>> breaking
>>> rule, and it is not simple to know applications/services/ports of the
>>> majority of legitimate applications (apart from browser mailer and few
>>> others).
>>> My question is: is there a way to have a kind of display notification of
>>> the
>>> outbound offended rule with applications/services/ports of the offending
>>> programs?
>>> Thanks in advance
>>> Riccardo
>>>
>>>
>
>
 
K

Kerry Brown

Correct but the firewall in Vista is fully capable of doing this. Unless the
firewall also does some threat profiling as some hardware firewalls do the
built in firewall is as good as any and better than most for inbound
access. I always rely on a hardware firewall as the first line of defense
and a software firewall to protect against worms that are already inside the
perimeter.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Ian Betts" <igb123@talktalk.net> wrote in message
news:4943AB5B-FB57-4B44-B523-57EC185F12EB@microsoft.com...
> But a good hardware and software firewall should stop the malware getting
> in.
>
>
>
> --
> Ian
>
> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
> news:1C1C7D21-37AC-4326-8BC3-CB4D570831A9@microsoft.com...
>> No firewall that runs locally on a computer can be relied upon to stop
>> outgoing traffic from malware. If the malware is running on the computer
>> it can alter anything on the computer including the firewall. The
>> firewall can make this hard to do but not impossible.
>>
>> --
>> Kerry Brown
>> Microsoft MVP - Shell/User
>> http://www.vistahelp.ca
>>
>>
>> "Ian Betts" <igb123@talktalk.net> wrote in message
>> news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>>>I never use Windows firewall, They are inferiorat the best of times to a
>>>good stand alone. I use the one that comes with Panda VP, nothing appears
>>>to get past it and it can be set for in's and out's.
>>>
>>>
>>>
>>> --
>>> Ian
>>>
>>> "Riccardo" <riccardo@nospam.it> wrote in message
>>> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>>>> Hi,
>>>> Vista FW with advanced security comes with an outbound traffic default
>>>> setting "allow everything which is not denied". I think this is
>>>> completely
>>>> useless, because the main reason for outbound traffic filter is to
>>>> block
>>>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a
>>>> rule to
>>>> deny an unknown program/destination port. On the other hand if I change
>>>> the
>>>> outbound setting to "block everything that does not match a rule" it is
>>>> nearly impossible to design a rule for legitimate programs because, as
>>>> far
>>>> as I understand, there is no "display notification" for outbound
>>>> breaking
>>>> rule, and it is not simple to know applications/services/ports of the
>>>> majority of legitimate applications (apart from browser mailer and few
>>>> others).
>>>> My question is: is there a way to have a kind of display notification
>>>> of the
>>>> outbound offended rule with applications/services/ports of the
>>>> offending
>>>> programs?
>>>> Thanks in advance
>>>> Riccardo
>>>>
>>>>
>>
>>
 
R

Richard Urban

Kerry. May I ask as to what hardware firewall you are using?

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
news:8EFBFF1E-AC59-4623-B762-8AA8F6CBE673@microsoft.com...
> Correct but the firewall in Vista is fully capable of doing this. Unless
> the firewall also does some threat profiling as some hardware firewalls do
> the built in firewall is as good as any and better than most for inbound
> access. I always rely on a hardware firewall as the first line of defense
> and a software firewall to protect against worms that are already inside
> the perimeter.
>
> --
> Kerry Brown
> Microsoft MVP - Shell/User
> http://www.vistahelp.ca
>
>
> "Ian Betts" <igb123@talktalk.net> wrote in message
> news:4943AB5B-FB57-4B44-B523-57EC185F12EB@microsoft.com...
>> But a good hardware and software firewall should stop the malware getting
>> in.
>>
>>
>>
>> --
>> Ian
>>
>> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
>> news:1C1C7D21-37AC-4326-8BC3-CB4D570831A9@microsoft.com...
>>> No firewall that runs locally on a computer can be relied upon to stop
>>> outgoing traffic from malware. If the malware is running on the computer
>>> it can alter anything on the computer including the firewall. The
>>> firewall can make this hard to do but not impossible.
>>>
>>> --
>>> Kerry Brown
>>> Microsoft MVP - Shell/User
>>> http://www.vistahelp.ca
>>>
>>>
>>> "Ian Betts" <igb123@talktalk.net> wrote in message
>>> news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>>>>I never use Windows firewall, They are inferiorat the best of times to a
>>>>good stand alone. I use the one that comes with Panda VP, nothing
>>>>appears to get past it and it can be set for in's and out's.
>>>>
>>>>
>>>>
>>>> --
>>>> Ian
>>>>
>>>> "Riccardo" <riccardo@nospam.it> wrote in message
>>>> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>>>>> Hi,
>>>>> Vista FW with advanced security comes with an outbound traffic default
>>>>> setting "allow everything which is not denied". I think this is
>>>>> completely
>>>>> useless, because the main reason for outbound traffic filter is to
>>>>> block
>>>>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a
>>>>> rule to
>>>>> deny an unknown program/destination port. On the other hand if I
>>>>> change the
>>>>> outbound setting to "block everything that does not match a rule" it
>>>>> is
>>>>> nearly impossible to design a rule for legitimate programs because, as
>>>>> far
>>>>> as I understand, there is no "display notification" for outbound
>>>>> breaking
>>>>> rule, and it is not simple to know applications/services/ports of the
>>>>> majority of legitimate applications (apart from browser mailer and few
>>>>> others).
>>>>> My question is: is there a way to have a kind of display notification
>>>>> of the
>>>>> outbound offended rule with applications/services/ports of the
>>>>> offending
>>>>> programs?
>>>>> Thanks in advance
>>>>> Riccardo
>>>>>
>>>>>
>>>
>>>
>
 
C

CB

Daze N. Knights,

ZoneAlarm does not make a product that is compatible with Vista. I don't
care what ZoneAlarm says. I used ZoneAlarm for years on XP and it was a great
application. However, if you try to download and install the free ZoneAlarm
firewall for Vista or the ZoneAlarm Internet Security Suite for Vista you are
asking for trouble.

I tried in vain to get the ZoneAlarm Vista products to install and run
correctly to no avail. What a nightmare! I have never had to do so many
System Restores in my life. I also had to go into the registry and delete the
remnants of ZoneAlarm after the System Restores. You should read the reviews
of ZoneAlarm's Vista products and you will understand what I am saying. I do
not have any problems downloading and installing any of the other security
applications from other vendors.
Of course, this does not include Norton/Symantec and McAfee, which I would
advise staying away from (both of them are resource hogs and cause more
problems than they fix. Also, once they are entrenched in your system it is
almost impossible to eliminate them unless you reformat and do a clean
install).

My wireless router/modem has a hardware firewall and my software firewall is
the Windows firewall. I have had no problems. Of course, some people will
undoubtably be able to download ZoneAlarm products for Vista and have no
problems whatsoever. This seems to be the exception rather than the rule.

Have a nice day.

C.B.
 
R

Richard Urban

I have tested the Vista compatible versions of ZA and find that any of them
will slow down the system tremendously.

I used to say that I was willing to sacrifice a 5% slowdown for, what I
perceived to be, the extra security. But these new versions slow down the
system perceptibly - likely about 20% in my case.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"CB" <CB@discussions.microsoft.com> wrote in message
news:4245862D-DAE1-4F99-9BA4-A1E911E8CA5E@microsoft.com...
> Daze N. Knights,
>
> ZoneAlarm does not make a product that is compatible with Vista. I don't
> care what ZoneAlarm says. I used ZoneAlarm for years on XP and it was a
> great
> application. However, if you try to download and install the free
> ZoneAlarm
> firewall for Vista or the ZoneAlarm Internet Security Suite for Vista you
> are
> asking for trouble.
>
> I tried in vain to get the ZoneAlarm Vista products to install and run
> correctly to no avail. What a nightmare! I have never had to do so many
> System Restores in my life. I also had to go into the registry and delete
> the
> remnants of ZoneAlarm after the System Restores. You should read the
> reviews
> of ZoneAlarm's Vista products and you will understand what I am saying. I
> do
> not have any problems downloading and installing any of the other security
> applications from other vendors.
> Of course, this does not include Norton/Symantec and McAfee, which I would
> advise staying away from (both of them are resource hogs and cause more
> problems than they fix. Also, once they are entrenched in your system it
> is
> almost impossible to eliminate them unless you reformat and do a clean
> install).
>
> My wireless router/modem has a hardware firewall and my software firewall
> is
> the Windows firewall. I have had no problems. Of course, some people will
> undoubtably be able to download ZoneAlarm products for Vista and have no
> problems whatsoever. This seems to be the exception rather than the rule.
>
> Have a nice day.
>
> C.B.
 
D

Daze N. Knights

Hmm. I have been using ZA7.1.078.000 Free for Vista for over two weeks
with no problems at all and no noticeable slowdown. So, it's apparently
a case of YMMV.

Daze
-------------

Richard Urban wrote:
> I have tested the Vista compatible versions of ZA and find that any of
> them will slow down the system tremendously.
>
> I used to say that I was willing to sacrifice a 5% slowdown for, what I
> perceived to be, the extra security. But these new versions slow down
> the system perceptibly - likely about 20% in my case.
>
 
K

Kerry Brown

I use a DFL-210. It's fairly expensive. I need the VPN performance it offers
with the firewall. It also does traffic shaping and more.

http://www.dlink.com/products/?sec=2&pid=512

The DFL-CP310 is also good if you don't need the VPN performance of the
DFL-210.

http://www.dlink.com/products/?sec=2&pid=481

I like DLink because I'm a dealer. SonicWall and others have equally good
solutions for around $250.00 and up. It may sound expensive but a good
router/firewall can actually give you a noticeable speed increase on a
broadband connection if you have more than a couple of computers. It's
surprising what a decent CPU and RAM does for a router. They are a little
more complicated to setup and there is the ongoing expense of the security
update subscription but the results are worth it. Note that this doesn't
mean you don't need an antivirus on your computer :)

You could also use an old computer with Linux. There are some distros
designed just for this purpose. The Linux solution could be very cheap if
you have the hardware already in a closet somewhere.

This is probably overkill for most people. For the average home I'd
recommend something like the DIR-330. The firewall isn't as sophisticated
but it's decent enough and easy to configure.

http://www.dlink.com/products/?sec=0&pid=564

Even Checkpoint (Zonealarm) is getting into the home/soho hardware firewall
market.

http://www.zonealarm.com/store/content/catalog/products/z100g/index.jsp

As malware becomes more sophisticated software firewalls will become less
useful for protection against malware. With root kits and hardware
virtualization malware can hide from the OS and easily communicate around
the OS.

--
Kerry Brown
Microsoft MVP - Shell/User
http://www.vistahelp.ca


"Richard Urban" <richardurbanREMOVETHIS@hotmail.com> wrote in message
news:%23cq$A4zxHHA.4276@TK2MSFTNGP05.phx.gbl...
> Kerry. May I ask as to what hardware firewall you are using?
>
> --
>
>
> Regards,
>
> Richard Urban
> Microsoft MVP Windows Shell/User
> (For email, remove the obvious from my address)
>
>
>
> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
> news:8EFBFF1E-AC59-4623-B762-8AA8F6CBE673@microsoft.com...
>> Correct but the firewall in Vista is fully capable of doing this. Unless
>> the firewall also does some threat profiling as some hardware firewalls
>> do the built in firewall is as good as any and better than most for
>> inbound access. I always rely on a hardware firewall as the first line of
>> defense and a software firewall to protect against worms that are already
>> inside the perimeter.
>>
>> --
>> Kerry Brown
>> Microsoft MVP - Shell/User
>> http://www.vistahelp.ca
>>
>>
>> "Ian Betts" <igb123@talktalk.net> wrote in message
>> news:4943AB5B-FB57-4B44-B523-57EC185F12EB@microsoft.com...
>>> But a good hardware and software firewall should stop the malware
>>> getting in.
>>>
>>>
>>>
>>> --
>>> Ian
>>>
>>> "Kerry Brown" <kerry@kdbNOSPAMsys-tems.c*a*m> wrote in message
>>> news:1C1C7D21-37AC-4326-8BC3-CB4D570831A9@microsoft.com...
>>>> No firewall that runs locally on a computer can be relied upon to stop
>>>> outgoing traffic from malware. If the malware is running on the
>>>> computer it can alter anything on the computer including the firewall.
>>>> The firewall can make this hard to do but not impossible.
>>>>
>>>> --
>>>> Kerry Brown
>>>> Microsoft MVP - Shell/User
>>>> http://www.vistahelp.ca
>>>>
>>>>
>>>> "Ian Betts" <igb123@talktalk.net> wrote in message
>>>> news:01800B40-CA63-4EE0-8979-39A4D210DE1B@microsoft.com...
>>>>>I never use Windows firewall, They are inferiorat the best of times to
>>>>>a good stand alone. I use the one that comes with Panda VP, nothing
>>>>>appears to get past it and it can be set for in's and out's.
>>>>>
>>>>>
>>>>>
>>>>> --
>>>>> Ian
>>>>>
>>>>> "Riccardo" <riccardo@nospam.it> wrote in message
>>>>> news:#8EEPGvxHHA.4928@TK2MSFTNGP03.phx.gbl...
>>>>>> Hi,
>>>>>> Vista FW with advanced security comes with an outbound traffic
>>>>>> default
>>>>>> setting "allow everything which is not denied". I think this is
>>>>>> completely
>>>>>> useless, because the main reason for outbound traffic filter is to
>>>>>> block
>>>>>> UNKNOWN programs (worm, trojans ....) so it is impossible to make a
>>>>>> rule to
>>>>>> deny an unknown program/destination port. On the other hand if I
>>>>>> change the
>>>>>> outbound setting to "block everything that does not match a rule" it
>>>>>> is
>>>>>> nearly impossible to design a rule for legitimate programs because,
>>>>>> as far
>>>>>> as I understand, there is no "display notification" for outbound
>>>>>> breaking
>>>>>> rule, and it is not simple to know applications/services/ports of the
>>>>>> majority of legitimate applications (apart from browser mailer and
>>>>>> few
>>>>>> others).
>>>>>> My question is: is there a way to have a kind of display notification
>>>>>> of the
>>>>>> outbound offended rule with applications/services/ports of the
>>>>>> offending
>>>>>> programs?
>>>>>> Thanks in advance
>>>>>> Riccardo
>>>>>>
>>>>>>
>>>>
>>>>
>>
>
 
X

XS11E

"Ian Betts" <igb123@talktalk.net> wrote:

> But a good hardware and software firewall should stop the malware
> getting in.

Only if configured properly, no firewall can protect you against
something you or another user invite into your machine.


--
XS11E, Killing all posts from Google Groups
The Usenet Improvement Project: http://blinkynet.net/comp/uip5.html
 
R

Richard Urban

Only if configured properly, no firewall can protect you against
> something you or another user invite into your machine.


That is correct. But a good software firewall just may prevent that key
logger you inadvertently installed last week from phoning home with your
credit card and pin numbers, your social security card #, your Full Name and
address - in short, everything that someone needs to steal your identity.

A key logger can be on you computer for years and never do any damage - if
it's outgoing communication is flagged and then denied.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)



"XS11E" <xs11e@NOSPAMyahoo.com> wrote in message
news:Xns996EE896F9913xs11eyahoocom@127.0.0.1...
> "Ian Betts" <igb123@talktalk.net> wrote:
>
>> But a good hardware and software firewall should stop the malware
>> getting in.
>
> Only if configured properly, no firewall can protect you against
> something you or another user invite into your machine.
>
>
> --
> XS11E, Killing all posts from Google Groups
> The Usenet Improvement Project: http://blinkynet.net/comp/uip5.html
 
You must log in or register to reply here.

Similar threads

P
Windows Firewall question - outbound
Replies
0
Views
56
PerhapsCloud
P
R
Add Store apps to Windows Firewall outbound rule
Replies
0
Views
121
Razvan Chisa
R
M
Can i exclude set of IP Address range from the Windows Firewall Rule?
Replies
0
Views
142
MujahithMuzamil
M
C
Miracast and Microsoft Wireless Display Adapter not working with Symantec Endpoint Protection local firewall rules
Replies
0
Views
360
Clément Desbrousses
C
J
Windows defender firewall unable to find programs when searching for them through outbound rules. How do I fix this?
Replies
0
Views
127
JordanButler3
J
Back
Top Bottom