firewall

Molly

where can i get a good firewall????????

---

When ya want it goes away too fast times ya hate it always seem to last secretdeathsquad.clanpages.com

SantaHoe

hmm I'm assuming he's looking for something to catch port attacks on his l33t windowze box

Hobbes

A good firewall normally sits on another box, but if it's Windoze,

then (Conseal Firewall) http://www.signal9.com/ do good firewalls.

For the Mac, NetBarrier http://www.intego.com/netbarrier/

Lump

Atguard OWNS my ass......

****0rs Norton bought it out...


John

sam

A good firewall normally sits on another box

why is that then?




[This message has been edited by sam (edited 10-07-2000).]

sam

ok, im running conseal firewall on win98 with internet connection sharing , and sometimes running linux with gatewaying and firewalling enabled, both are rule based firewalls.. fairly simple.. 2 other computers sharing the internet connection through my machine.. the firewall in both cases(linux and win98) doesnt do much except block all access to ports below 1024(except DNS) over IP, and doesnt allow any ICMP except type 8(ping) outwards and type 0(ping reply) inwards, and blocks IP fragments.

im just wondering, how would anything i run on my pc affect the "security" of the firewall, bar some program in win98 actually crashing the firewall or something

the firewall is not meant to block trojans or anything, i know you could easily set up a trojan server to operate on port 65535 or whatever to bypass the firewall, the firewall merely blocks access to stuff people have running on the lan(filesharing,ftp servers, etc)

sam

i meant "affect the security" as in, "make this system worse than if i had a separate box running it", ie. "what makes this a bad firewall system"

phil

http://csrc.ncsl.nist.gov/nistpubs/800-10/node31.html#SECTION00510000000000000000

sam

yeah i see what you're saying, i was taking the point of view of someone who isnt offering any services on the internet in the first place, eg. web server etc.

as for dropping everything and only allowing what i want, that is what the actual rules are set up to do, basically i specified to allow all tcp/udp to ports above 1023, allow ping out, and allow arp, the firewall will drop anything which is not specified..
reason i specified all ports above 1024 is because i play games on the machine too, half of them (eg. quake) use ports around 27000 anyway.