J
JS
So is a one way firewall.
JS
JS
Unknown said:Ridiculous comment.
JS said:Sort of like monitoring who walks into your house,
but you don't care who walks back out and what they are carrying.
JS
Kayman said:On Sat, 20 Sep 2008 10:46:05 -0400, Big_Al wrote:
I like the outbound traffic filter in Zone Alarm. I use the free
version, however free is not the primary need. But I've read here so
many comments about not using ZA and just use windows firewall, or just
negative comments about ZA.
I would like to know, is there another program that will filter
outbound
traffic and is better than ZA?
For the average homeuser, the Windows Firewall in XP does a fantastic
job
at its core mission and is really all you need if you have an
'real-time'
anti-virus program, [another firewall on your router or] other edge
protection like SeconfigXP and practise safe-hex.
The windows firewall deals with inbound protection and therefore does
not
give you a false sense of security. Best of all, it doesn't implement
lots
of nonsense like pretending that outbound traffic needs to be monitored.
At Least This Snake Oil Is Free.
http://msinfluentials.com/blogs/jesper/archive/2007/07/19/at-least-this-snake-oil-is-free.aspx
Deconstructing Common Security Myths.
http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx
Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."
Exploring the windows Firewall.
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx
"Outbound protection is security theater¡Xit¡¦s a gimmick that only
gives the
impression of improving your security without doing anything that
actually
does improve your security."
In conjunction with WinXP SP2 Firewall use:
Seconfig XP 1.0
http://seconfig.sytes.net/
(http://www.softpedia.com/progDownload/Seconfig-XP-Download-39707.html)
Seconfig XP is able configure Windows not to use TCP/IP as transport
protocol for NetBIOS, SMB and RPC, thus leaving TCP/UDP ports 135,
137-139
and 445 (the most exploited Windows networking weak point) closed.
OR
Configuring NT-services much more secure.
http://www.ntsvcfg.de/ntsvcfg_eng.html