Firewall Choice?

Warpy · Jun 7, 2007, 02:10 AM

I'm after a nice software firewall, anyone have any good recommendations? I'm using Windows XP SP2. It doesn't have to freeware so long as it's good?

RoyBatty · Jun 7, 2007, 02:51 AM

I could post another JPF recommendation post, but I'll just point you to the other "What is the best firewall?" threads where I already did that.

Here you go:
Which firewall is best?
What firewall is best? (you started this one)

BlueMak · Jun 7, 2007, 03:53 AM

Sunbelt Kerio Personal Firewall, free. Or get the pro paid version which has some bonus like ad blocking etc.

Widkidone · Jun 7, 2007, 05:26 AM

Comodo Firewall Is what I would recommend

Nick0323 · Jun 7, 2007, 06:18 AM

Get a Router, a software firewall will only destroy your pc's desktop performance. As soon as I installed my Linksys Router, Zonealarm Pro wen't absolutely quiet, no incoming threats. A standard router will do the job but if you want that extra protection get a firewall router which you can pick up for around �40 ($80).

After I set up my router I disabled windows firewall and uninstalled Zonealarm Pro. MEGA performance improvement.

Warpy · Jun 7, 2007, 06:49 AM

I do have a DLINK 624 but I was told I needed a software firewall too, just for added protection.

Nick0323 · Jun 7, 2007, 07:03 AM

Quote:

Originally Posted by Warpy

I do have a DLINK 624 but I was told I needed a software firewall too, just for added protection.

no you don't mate. if you wan't that added protection just keep windows firewall on which won't eat any resources

Nick0323 · Jun 7, 2007, 07:24 AM

Go on Warpy, save yourself the hassle, the guy who told me about only needing a router and no software firewall has been building computers for over 20 years, my PC was even built by him in december 2003! Even he has the same router as me and has never used a software based firewall in his lifetime!

Matth · Jun 7, 2007, 12:22 PM

The router does a grand job of keeping junk like portscans out, but the router can do nothing to decide if traffic is from a wanted application, or an unwanted one.

Behind a router though, a software Hips http://wiki.castlecops.com/HIPS/IDP_programs/services may be more relevant, the process control capabilities of many firewalls being as important as their net marshalling, and an area where Windows firewall is totally useless.

Of course you can do without a firewall, you can also do without an antivirus, since behind a router and with up to date windows patches, you cannot be attacked from outside. The problem is the crap YOU might invite in, by opening an email that contains a trojan, or in software with unwanted passengers.

The watchword is "layered defence", from prudent avoidance of dangerous sites and downloads, viewing email as safe text, to the antivirus which you hope will catch a nasty if it gets through and the firewall/hips which you hope will pick up on unexpected behaviour.

As for a firewall, there is little reason to go with anything other than Comodo - it seems to tick all the boxes, and it's free - just depends if you want any of the extra features in some you can buy, such as adblocking.

Nick0323 · Jun 7, 2007, 01:15 PM

Quote:

Originally Posted by Matth

The router does a grand job of keeping junk like portscans out, but the router can do nothing to decide if traffic is from a wanted application, or an unwanted one.

Behind a router though, a software Hips http://wiki.castlecops.com/HIPS/IDP_programs/services may be more relevant, the process control capabilities of many firewalls being as important as their net marshalling, and an area where Windows firewall is totally useless.

Of course you can do without a firewall, you can also do without an antivirus, since behind a router and with up to date windows patches, you cannot be attacked from outside. The problem is the crap YOU might invite in, by opening an email that contains a trojan, or in software with unwanted passengers.

The watchword is "layered defence", from prudent avoidance of dangerous sites and downloads, viewing email as safe text, to the antivirus which you hope will catch a nasty if it gets through and the firewall/hips which you hope will pick up on unexpected behaviour.

As for a firewall, there is little reason to go with anything other than Comodo - it seems to tick all the boxes, and it's free - just depends if you want any of the extra features in some you can buy, such as adblocking.

granted a router can do nothing for a program that wants to connect to the internet...not good if you use non-genuine programs. as for email's avg anti-virus free editions has a built in e-mail scanner. granted it can't detect all sorts of things but anything that looks junky gets kicked by me anyways.

Your choice Warpy but Matth has some very good points. I've been running my fresh windows xp installation for 6 months based on a router and avg anti-virus free edition and I haven't detected any problems, slow-downs or crashes for that matter ^^

BWX · Jun 7, 2007, 02:12 PM

Sygate personal firewall is a great software firewall. I disabled it when I got my router though. I watch my outgoing connections with various programs though just to be safe.

Robert McClelland · Jun 9, 2007, 10:09 PM

Try Safety.net get here http://www.netveda.com/updates/?prod...sion=3.61.0002
it's free and works with ms s center also and www.avast.com virus scanner is on access real time scanning. those two never used up ram that much like anyother firewall I'd try so far.

Tipstaff · Jun 10, 2007, 06:15 AM

Just because the guy has been building computers for 20 years doesn't mean he's right, Nick. What he hasn't mentioned to you is that there are holes in hardware routers just as there is in software ones. Not as many, but they are there. Plus, not every routers built in firewall is the same.. some are crap.. some don't have one.. and some are very, very basic. Besides which there are plenty of default open ports for applications to go through in all routers. For instance port 80 (http), 443 (https), ports 110 and 25 for non secured email, 3389, 23, 1863 (MSN Messenger), plus plenty of others are always open by default, and those are open ports a trojan or piece of malware can get through.

What a software firewall allows you to do is to specifically choose to allow or disallow access to the network (be it Internet/Lan) on a per application basis. Don't want Limewire accessing the net? No prob. Just block it's ass. Sure, some routers allow you to do very similar blocking, however by default they don't, and as I said before, not every router allows you to do so. The cheaper you get, the worse the firewall, or infact, the more likely the router has no firewall at all.

In any case, do you need both a router that has a firewall (again, not all routers have a firewall) along with a software firewall? I guess it really depends on the situation. If you are doing a lot of P2P downloading, technically illiterate, or are risky in your browsing habits, then yes, you should have both. Otherwise I'd say you don't. Personally I don't use both as it get's in the way, however I'm also very cautious about where I go on the net, and I know what applications are installed. Mind you at work I do have both setup on all my machines. I have had plenty of instances where the routers firewall let something slip through (and this isn't a cheap router I'm using either), and since my work data is very, very f'ing important, it warrants being paranoid, so both a hardware and software solution is being used there.

GutterPunk · Jun 12, 2007, 09:42 AM

I like COMODO + Hardware firewall.

NAZ2222 · Jun 12, 2007, 10:21 AM

Comodo for me is the best! simple and free