SixFiles :: View topic - Freeware firewall for Vista?

FAQ

Memberlist

Usergroups

Profile

Freeware firewall for Vista?
Goto page 1, 2 Next

SixFiles Forum Index -> Freeware Software

View previous topic :: View next topic

Sponsored Links

Author

Message

ceed
Guest

Posted: Sat Jul 14, 2007 5:46 pm Post subject: Freeware firewall for Vista?

Hi, I know that the question about "the best freeware firewall" comes up in this group often. But since I have been pushed over on Windows Vista I would like to ask what's best free alternative for me at this point?

Bear Bottoms
Guest

Posted: Sat Jul 14, 2007 6:27 pm Post subject: Re: Freeware firewall for Vista?

On Sat, 14 Jul 2007 16:46:28 -0500, ceed <ceed.spameater@dysthe.net> wrote:

Quote:

Hi,

I know that the question about "the best freeware firewall" comes up in this group often. But since I have been pushed over on Windows Vista I would like to ask what's best free alternative for me at this point?

The firewall that comes with Vista is a very good one. I would recommend using that one until Comodo Personal Firewall Vista ready comes out of Alpa, then through Beta... a stable release is available and it has been reviewed. The outbound protection on Vista's firewall is turned off by default, therefore turn it on if you want that.

Lew/+Silat
Guest

Posted: Sat Jul 14, 2007 8:03 pm Post subject: Re: Freeware firewall for Vista?

"Bear Bottoms" <bearbottoms1@gmai.com> wrote in message news:op.tvg7cnz3jo4m88@bwwlxc1...

Quote:

On Sat, 14 Jul 2007 16:46:28 -0500, ceed <ceed.spameater@dysthe.net> wrote:

Quote:

I agree with BB about Vista's firewall. It is fully adequate. If you desire more control then there are a few FW's out there to play with.
You can go to http://www.wilderssecurity.com/ to read about some of them.

Kayman
Guest

Posted: Sat Jul 14, 2007 9:17 pm Post subject: Re: Freeware firewall for Vista?

"ceed" <ceed.spameater@dysthe.net> wrote in message news:174rpy0orrif1.1pkqvlqs4fzbn.dlg@40tude.net...

Quote:

Hi,
I know that the question about "the best freeware firewall" comes up in this group often. But since I have been pushed over on Windows Vista I would like to ask what's best free alternative for me at this point?

Stick with Vista Firewall and learn as how to configure it to suit your computing habits. And remember, Vista f/w it's an *integrated* part of the OS.

Interesting/educational reading:

http://www.microsoft.com/technet/technetmag/issues/2006/05/SecurityMyths/default.aspx Scroll down to:
"Myth: Host-Based Firewalls Must Filter Outbound Traffic to be Safe."
http://www.microsoft.com/technet/technetmag/issues/2007/06/VistaFirewall/default.aspx "Outbound protection is security theater-it's a gimmick..." "...the Windows firewall will provide the protection you need..."
Stay away from 'Phoney-Baloney' 3rd party PFW's - use your brain and filter out the absurd advertisement hype created by these makers. http://samspade.org/d/firewalls.html
"Personal Firewalls" are mostly snake-oil"

Kayman
Guest

Posted: Sat Jul 14, 2007 10:09 pm Post subject: Re: Freeware firewall for Vista?

"Abstract Reasoning" <abstract@reasoning.in.nz> wrote in message news:46998075@news.orcon.net.nz...

Quote:

Just be aware that if you turn on the outbound filtering that you will need to manually enter rules to allow such things as Windows Update to function, as it provides no notification of any outbound blocking (it only does so for inbound connection attempts), and adding programs to the firewall allow list only gives them inbound access.
To activate the outbound filtering in Vista you need to go to the "Windows Firewall with Advanced Security" MMC (Control Panel -> System and Maintenance -> Administrative Tools -> Windows Firewall with...), then under "Overview" click on "Windows Firewall Properties", then on the "Private Profile" tab (assuming you run your internet connection through this, otherwise do the same for Domain and Public to make sure) choose "Block" for "Outbound Connections" then click "OK".
Then to allow Windows Update (for example) to access Microsoft's servers, you need to click on "Outbound Rules" in the left pane on the main page of the "Windows Firewall with Advanced Security" MMC, then under "Actions" in the right pane, click on "New Rule..." which will bring up a Rule Wizard. For Rule Type, select "Custom", clicking on "Next" to proceed, then ensure "This program path:" is selected, click on "Browse" and navigate to your "Windows/System32" folder then select "svchost.exe" and click "Open" (or alternatively just enter %SystemRoot%\System32\svchost.exe in the "This program path: field), then under "Services" click on "Customize", select "Apply to this service:" scrolling down to "Windows Update" (wuauserv) and click on "OK". Now click "Next" to continue to the next stage of the wizard, clicking on "Yes" to the service-hardening conflict warning requestor that pops up asking "Are you sure that you want to create a rule referencing this process?". On the "Protocol and Ports" stage of the wizard under "Protocol type:" select "UDP" from the drop down, for "Local port:" select "Specific Ports" and enter "80, 443" and likewise for "Remote port:". Now click "Next" to continue to wizard. On the "Scope" stage, leave the IP addresses as "Any IP address" as there is nothing that can realistically be done here to narrow the scope of connects (it would be ideal if the remote addresses could be limited to a certain IP address range [but Microsoft has them all over the place - I've seen connects through "Hotmail" servers for instance], or name range such as *.windowsupate.microsoft.com [but there is no ability to enter these]), so click on "Next". For Action, select "Allow the connection" (I have previously tried "Allow the connection if it is secure" but this does not work as it would appear that Microsoft does not support this for Windows Update) then click on "Next". Under Profile, you can probably leave all 3 ticked (although I have this limited to "Private" - it depends on which profile and form of internet connection you are using), then click on "Next" again, giving the Rule a "Name:" on the next page (ie like Windows Update - just something so that you know what it is), and finally click on "Finish". Now you should be able to use Windows Update with Outbound blocking on.

A hassle to have to configure this way, but worthwhile if you are seriously considering this method rather than an alternative third party Firewall (at least in the interim). The Vista Firewall really needs more work in the accessibility and usability department.

I echo the comments made by Abstract Reasoning. Security just does not happen, you have to put some effort in it. If you are serious about security stay away from PFW's.
Good luck Smile

Abstract Reasoning
Guest

Posted: Sat Jul 14, 2007 10:18 pm Post subject: Re: Freeware firewall for Vista?

"Bear Bottoms" <bearbottoms1@gmai.com> wrote in message news:op.tvg7cnz3jo4m88@bwwlxc1...

Quote:

On Sat, 14 Jul 2007 16:46:28 -0500, ceed <ceed.spameater@dysthe.net> wrote:

Quote:

Just be aware that if you turn on the outbound filtering that you will need to manually enter rules to allow such things as Windows Update to function, as it provides no notification of any outbound blocking (it only does so for inbound connection attempts), and adding programs to the firewall allow list only gives them inbound access.

To activate the outbound filtering in Vista you need to go to the "Windows Firewall with Advanced Security" MMC (Control Panel -> System and Maintenance -> Administrative Tools -> Windows Firewall with...), then under "Overview" click on "Windows Firewall Properties", then on the "Private Profile" tab (assuming you run your internet connection through this, otherwise do the same for Domain and Public to make sure) choose "Block" for "Outbound Connections" then click "OK".

Then to allow Windows Update (for example) to access Microsoft's servers, you need to click on "Outbound Rules" in the left pane on the main page of the "Windows Firewall with Advanced Security" MMC, then under "Actions" in the right pane, click on "New Rule..." which will bring up a Rule Wizard. For Rule Type, select "Custom", clicking on "Next" to proceed, then ensure "This program path:" is selected, click on "Browse" and navigate to your "Windows/System32" folder then select "svchost.exe" and click "Open" (or alternatively just enter %SystemRoot%\System32\svchost.exe in the "This program path: field), then under "Services" click on "Customize", select "Apply to this service:" scrolling down to "Windows Update" (wuauserv) and click on "OK". Now click "Next" to continue to the next stage of the wizard, clicking on "Yes" to the service-hardening conflict warning requestor that pops up asking "Are you sure that you want to create a rule referencing this process?". On the "Protocol and Ports" stage of the wizard under "Protocol type:" select "UDP" from the drop down, for "Local port:" select "Specific Ports" and enter "80, 443" and likewise for "Remote port:". Now click "Next" to continue to wizard. On the "Scope" stage, leave the IP addresses as "Any IP address" as there is nothing that can realistically be done here to narrow the scope of connects (it would be ideal if the remote addresses could be limited to a certain IP address range [but Microsoft has them all over the place - I've seen connects through "Hotmail" servers for instance], or name range such as *.windowsupate.microsoft.com [but there is no ability to enter these]), so click on "Next". For Action, select "Allow the connection" (I have previously tried "Allow the connection if it is secure" but this does not work as it would appear that Microsoft does not support this for Windows Update) then click on "Next". Under Profile, you can probably leave all 3 ticked (although I have this limited to "Private" - it depends on which profile and form of internet connection you are using), then click on "Next" again, giving the Rule a "Name:" on the next page (ie like Windows Update - just something so that you know what it is), and finally click on "Finish". Now you should be able to use Windows Update with Outbound blocking on.

A hassle to have to configure this way, but worthwhile if you are seriously considering this method rather than an alternative third party Firewall (at least in the interim). The Vista Firewall really needs more work in the accessibility and usability department.

Abstract Reasoning
Guest

Posted: Sat Jul 14, 2007 10:32 pm Post subject: Re: Freeware firewall for Vista?

"Abstract Reasoning" <abstract@reasoning.in.nz> wrote in message news:46998075@news.orcon.net.nz...

Quote:

process?". On the "Protocol and Ports" stage of the wizard under "Protocol type:" select "UDP" from the drop down, for "Local port:" select "Specific Ports" and enter "80, 443" and likewise for "Remote port:". Now click "Next" to continue to wizard.

Sorry, that should be TCP (and I had been intending to make sure that was right before posting - oh well) for Protocol Type, and you probably can leave the Local Port set to "All Ports" - it's mainly the remote ports to restrict.

Aaron
Guest

Posted: Sun Jul 15, 2007 12:06 am Post subject: Re: Freeware firewall for Vista?

On Jul 15, 5:46 am, ceed <ceed.spamea...@dysthe.net> wrote:

Quote:

Very few freeware personal firewalls work on vista currently.
I *believe* ZoneAlarm does. Another one is http://www.pctools.com/firewall/ ..

And yes of course another option is just to use the build-in firewall in vista.

ceed
Guest

Posted: Sun Jul 15, 2007 12:19 am Post subject: Re: Freeware firewall for Vista?

On Sun, 15 Jul 2007 14:18:57 +1200, Abstract Reasoning wrote:

Quote:

"Bear Bottoms" <bearbottoms1@gmai.com> wrote in message news:op.tvg7cnz3jo4m88@bwwlxc1...

Quote:

On Sat, 14 Jul 2007 16:46:28 -0500, ceed <ceed.spameater@dysthe.net> wrote:

Quote:

Just be aware that if you turn on the outbound filtering that you will need to manually enter rules to allow such things as Windows Update to function, as it provides no notification of any outbound blocking (it only does so for inbound connection attempts), and adding programs to the firewall allow list only gives them inbound access.

To activate the outbound filtering in Vista you need to go to the "Windows Firewall with Advanced Security" MMC (Control Panel -> System and Maintenance -> Administrative Tools -> Windows Firewall with...), then under "Overview" click on "Windows Firewall Properties", then on the "Private Profile" tab (assuming you run your internet connection through this, otherwise do the same for Domain and Public to make sure) choose "Block" for "Outbound Connections" then click "OK".

Then to allow Windows Update (for example) to access Microsoft's servers, you need to click on "Outbound Rules" in the left pane on the main page of the "Windows Firewall with Advanced Security" MMC, then under "Actions" in the right pane, click on "New Rule..." which will bring up a Rule Wizard. For Rule Type, select "Custom", clicking on "Next" to proceed, then ensure "This program path:" is selected, click on "Browse" and navigate to your "Windows/System32" folder then select "svchost.exe" and click "Open" (or alternatively just enter %SystemRoot%\System32\svchost.exe in the "This program path: field), then under "Services" click on "Customize", select "Apply to this service:" scrolling down to "Windows Update" (wuauserv) and click on "OK". Now click "Next" to continue to the next stage of the wizard, clicking on "Yes" to the service-hardening conflict warning requestor that pops up asking "Are you sure that you want to create a rule referencing this process?". On the "Protocol and Ports" stage of the wizard under "Protocol type:" select "UDP" from the drop down, for "Local port:" select "Specific Ports" and enter "80, 443" and likewise for "Remote port:". Now click "Next" to continue to wizard. On the "Scope" stage, leave the IP addresses as "Any IP address" as there is nothing that can realistically be done here to narrow the scope of connects (it would be ideal if the remote addresses could be limited to a certain IP address range [but Microsoft has them all over the place - I've seen connects through "Hotmail" servers for instance], or name range such as *.windowsupate.microsoft.com [but there is no ability to enter these]), so click on "Next". For Action, select "Allow the connection" (I have previously tried "Allow the connection if it is secure" but this does not work as it would appear that Microsoft does not support this for Windows Update) then click on "Next". Under Profile, you can probably leave all 3 ticked (although I have this limited to "Private" - it depends on which profile and form of internet connection you are using), then click on "Next" again, giving the Rule a "Name:" on the next page (ie like Windows Update - just something so that you know what it is), and finally click on "Finish". Now you should be able to use Windows Update with Outbound blocking on.

A hassle to have to configure this way, but worthwhile if you are seriously considering this method rather than an alternative third party Firewall (at least in the interim). The Vista Firewall really needs more work in the accessibility and usability department.

Thank you for great advice! I will look more into what the built firewall cal do based on the info in your post.

Kat Mandu
Guest

Posted: Sun Jul 15, 2007 12:40 am Post subject: Re: Freeware firewall for Vista?

Aaron wrote:

Quote:

On Jul 15, 5:46 am, ceed <ceed.spamea...@dysthe.net> wrote:

Quote:

Very few freeware personal firewalls work on vista currently.
I *believe* ZoneAlarm does. Another one is http://www.pctools.com/firewall/

Yes, the new ZoneAlarm Free for Vista works fine and can be downloaded here: http://download.zonelabs.com/bin/free/1025_update/zaSetup_en.exe
To avoid possible conflicts, it is best to disable all startups for other security apps (via, for instance, msconfig) and reboot *before* installing ZoneAlarm Free for Vista, after which you can then re-enable your startups and reboot to get everything running again.

Susan Bugher
Guest

Posted: Sun Jul 15, 2007 12:55 am Post subject: Re: Freeware firewall for Vista?

Aaron wrote:

Quote:

Very few freeware personal firewalls work on vista currently.
I *believe* ZoneAlarm does.

Yahbut. . . It's hard to find and then things get worse. . . How many hoops are you willing to jump through? I suggest you go here instead of to the ZA site:

http://www.pcworld.com/downloads/file/fid,65012-order,1-page,1/description.html "ZoneAlarm for Vista"
"Note: this version of ZoneAlarm ONLY works with Vista."
zlsSetup_71_078_000_en.exe
17986 KB

Susan

Susan Bugher
Guest

Posted: Sun Jul 15, 2007 1:30 am Post subject: Re: Freeware firewall for Vista?

Kat Mandu wrote:

Quote:

Yes, the new ZoneAlarm Free for Vista works fine and can be downloaded here:
http://download.zonelabs.com/bin/free/1025_update/zaSetup_en.exe

SOS (Shades of Simtel). . .
That's a 250 KB download - Product name: "Internet Access Monitor"
The "download" link is shown on this page:
<http://www.zonealarm.com/store/content/company/products/znalm/freeDownload.jsp?dc=12bms&ctry=US&lang=en>
Susan

Kat Mandu
Guest

Posted: Sun Jul 15, 2007 2:11 am Post subject: Re: Freeware firewall for Vista?

Susan Bugher wrote:

Quote:

Kat Mandu wrote:

Quote:

Yes, the new ZoneAlarm Free for Vista works fine and can be downloaded here:
http://download.zonelabs.com/bin/free/1025_update/zaSetup_en.exe

You're right. It also allows for choosing between downloading the Vista or 2K/XP versions of ZA Free. It had been a couple of weeks since I first downloaded ZA Free for Vista, and I originally got the link (to the downloader) via Calendar of Updates, which is where I got it this time, as well.

Susan Bugher
Guest

Posted: Sun Jul 15, 2007 2:05 pm Post subject: Re: Freeware firewall for Vista?

Kat Mandu wrote:

Quote:

Susan Bugher wrote:

Quote:

Kat Mandu wrote:

Quote:

Yes, the new ZoneAlarm Free for Vista works fine and can be downloaded here:
http://download.zonelabs.com/bin/free/1025_update/zaSetup_en.exe

I forgot to post that ATM only 32-bit versions of Vista are supported. See: http://www.zonealarm.com/store/includes/zaSystemRequirements_popup.jsp
System Requirements:
Vista (32-bit):
* Pentium III 800 MHz or higher
* Minimum system RAM: 512 MB
* 50MB of available hard disk space. Internet access.
Windows XP/2000 Pro:
* Pentium III 450 MHz or higher
* Minimum system RAM: 128 MB
* 50MB of available hard disk space. Internet access.

Susan

Kat Mandu
Guest

Posted: Sun Jul 15, 2007 3:12 pm Post subject: Re: Freeware firewall for Vista?

Susan Bugher wrote:

Quote:

Kat Mandu wrote:

Quote:

Susan Bugher wrote:

Quote:

Kat Mandu wrote:

Quote:

Yes, the new ZoneAlarm Free for Vista works fine and can be downloaded here:
http://download.zonelabs.com/bin/free/1025_update/zaSetup_en.exe

I forgot to post that ATM only 32-bit versions of Vista are supported. See: http://www.zonealarm.com/store/includes/zaSystemRequirements_popup.jsp <q>
System Requirements:
Vista (32-bit):
* Pentium III 800 MHz or higher
* Minimum system RAM: 512 MB
* 50MB of available hard disk space. Internet access.
Windows XP/2000 Pro:
* Pentium III 450 MHz or higher
* Minimum system RAM: 128 MB
* 50MB of available hard disk space. Internet access. </q>

Susan

Good point, but the limitation to 32-bit OSs apparently applies to Windows XP, as well, despite that fact not being specifically mentioned on the page you cite. See here http://preview.tinyurl.com/2pfjja and note that (in the answer to question #12) it says, "NOTE: ZoneAlarm currently works only with 32-bit Operating Systems!"

Display posts from previous:

	SixFiles Forum Index -> Freeware Software	All times are GMT Goto page 1, 2 Next
Page 1 of 2

You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum