J
Jim Scott
<snip>
|> Gets us back to the question of whether it's worth having a firewall
|> at all. I do. I use Outpost, but I give it so many permissions to
|> allow this and that I do sometimes wonder...
|
|Why? Surely you know what programs you are using.
|
|I admit all those windows service processes like LSA, gets very confusing,
|but google them out and do some reading, decide whether you want them out
|or not, in most cases, you can block them without problems.
|
|I suppose, the outwards filtering function is useful, if you are in the
|habit of running new programs, and it can tell you if one of them attempts
|to "phone home" without warning. For apps that need internet connection
|it's more tricky, you need to perhaps put it "under probation" for a while
|and do a careful check of where exactly it is connecting to.
|
|The problem, is while this allows you to catch run of the mill spyware
|(most of them!), there are many known ways of beating outward filtering
|(see various leak tests and various counters), but nothing is 100% perfect
|anyway.
|
|Chances are though, what is leaking out is probably some of the browser
|addon stuff, like googletoolbar and versious BHOs or stuff that expolit
|yourr browser, which to all intents and purposes are seen as browsers to
|your firewall. Those will happily connect out, unless you block your
|browser
|
|
|Aaron (my email is not munged!)
|
Yes, I understand that I have to allow those programs, but to be honest I
don't give a stuff what goes out so long as nothing comes in in the form
of spyware or virus and I have a virus checker for that.
--
Jim
---------------------------------------------------------------------
Tyneside - Top right of England
To email me directly:
miss out the X from my reply address
Visit http://freespace.virgin.net/mr.jimscott
---------------------------------------------------------------------
|> Gets us back to the question of whether it's worth having a firewall
|> at all. I do. I use Outpost, but I give it so many permissions to
|> allow this and that I do sometimes wonder...
|
|Why? Surely you know what programs you are using.
|
|I admit all those windows service processes like LSA, gets very confusing,
|but google them out and do some reading, decide whether you want them out
|or not, in most cases, you can block them without problems.
|
|I suppose, the outwards filtering function is useful, if you are in the
|habit of running new programs, and it can tell you if one of them attempts
|to "phone home" without warning. For apps that need internet connection
|it's more tricky, you need to perhaps put it "under probation" for a while
|and do a careful check of where exactly it is connecting to.
|
|The problem, is while this allows you to catch run of the mill spyware
|(most of them!), there are many known ways of beating outward filtering
|(see various leak tests and various counters), but nothing is 100% perfect
|anyway.
|
|Chances are though, what is leaking out is probably some of the browser
|addon stuff, like googletoolbar and versious BHOs or stuff that expolit
|yourr browser, which to all intents and purposes are seen as browsers to
|your firewall. Those will happily connect out, unless you block your
|browser
|
|
|Aaron (my email is not munged!)
|
Yes, I understand that I have to allow those programs, but to be honest I
don't give a stuff what goes out so long as nothing comes in in the form
of spyware or virus and I have a virus checker for that.
--
Jim
---------------------------------------------------------------------
Tyneside - Top right of England
To email me directly:
miss out the X from my reply address
Visit http://freespace.virgin.net/mr.jimscott
---------------------------------------------------------------------