Firewall

[ttickzz]

skill level doesn't matter to me... but, i want great protection.... and i want a firewall that prevents outgoing connections as well as incoming connections (unlike the windows firewall)... Kerio has always just gave me problems, crashing... deleting my rule set....

Sygate, no doubt in my soul. You can adjust the incomming and outgoing connections as you want, it gives you the packet headers , it prevent you from MAC spoofing, anti IP spoofing, has DLL authentication and a lot more. Give it a try. To now, it is the best softwareFW i have found for windows. Yes Kerio is annoying

[enCode]

No firewall is absolutely hole proof, but I think the Windows firewall does a pretty decent job...just as long as you remember to download the updates.

How much is that saying really???

[Samurai_Drifter]

What do you mean? I'm saying that I think the Windows firewall does a pretty good job. I would reccomend it. However, if you don't download the updates, it is fairly useless. I went a little while without downloading updates and ended up with 82 detected viruses on my computer. Haven't gotten one since I finished the downloads.

[converge]

...because any firewall worth its weight in pixels will prevent you from executing rogue binaries

[syn-tax]

IMHO the windows firewall is pretty good, except impossible to configure for any real type of large Wcale network use. For example they have built in some nice features such as the subnet scope where only hosts on your local subnet are allowed traffic. However you can only specify one port at a time from both command line in netsh and through the shitty gui that is windows security center. However due to lack of university funding we were forced to use the firewall, so i made a very simple C program that works with the firewall.......i.e. generated a .bat file with the needed commands and that way you can specify multiple ports at a time from all the different scopes. After that I've found that the firewall isnt all that bad......for use behind a hard firewall

[enCode]

What about your opinions on linux firewalls?

[converge]

iptables is teh r0x0r

/me scratches head ... this thread needs some serious direction soon or it will be cast away.

there are already a crapload of threads with regards to firewalls in Computer Security, many of them already covering the 'this is my favorite because I use it' field of replies.

[TwinVega]

/me scratches head ... this thread needs some serious direction soon or it will be cast away.

there are already a crapload of threads with regards to firewalls in Computer Security, many of them already covering the 'this is my favorite because I use it' field of replies.

I agree, I thought this thread was answered a long time ago. Enough about the Windows firewall.

[sphyenx]

Windows comes with a firewall, it's going to keep you safe from anything evil doers are gonna throw at you.

Not that you would ever need one, but Kerio offers a good firewall
http://www.kerio.com/kpf_download.html

Note * if you use a server edition OS, do not look forward to using kerio. It will not run, and refuses to install on a server edition OS.

[converge]

It runs fine on 2000 server and advanced server for me .... what version of Kerio are you running? I admit to running the older revision.. I like it more.

[sphyenx]

thats probably why, I was using the newer. Also im running windows advanced server 2000.

[BSD]

use ipfw or iptable (i prefer ipfw) and a better os.

[oz0ne]

Linux Firewall

iptables
I'm kinda lazy tho, so I use fwbuilder to help configure it.
I'm used to the checkpoint FW1 interface, which fwbuilder resembles, hence my choice in using fwbuilder.
As a side note, fwbuilder can be used to make configs for other common firewalls also.
http://www.fwbuilder.org/

[stringslayer]

Firewalls

Far be it for me to assume-- You guys are running these windoze boxes at work right? Otherwise this whole conversation should be deleted.
This is too funny-- Defending windoze security on a DefCon site! :-)

[enCode]

Far be it for me to assume-- You guys are running these windoze boxes at work right? Otherwise this whole conversation should be deleted.
This is too funny-- Defending windoze security on a DefCon site! :-)

not quite sure i understand what you're saying.
do you mean that you are assuming that these are all windows firewalls?
or are you mocking the idea of windows security?
just trying to understand your post.