LITTLEBLACKDOG.COM

Posted: Sat Jul 07, 2001 8:27 am Post subject:

ZoneAlarm Pro 30-day trial can be had here

And for anyone who wants to extend the trial, all I can say is... astalavista (dot com), baby. [ Wink

]

My £0.02,
Demon
---=== ===---
Sentient beer

Big Dog Joined: 20 Oct 2000 Posts: 3689 Location: USA

damn

and less than a month after i paid to upgrade to the pro-version [ Surprised

)]

:pimp:

Posted: Wed Aug 01, 2001 2:54 pm Post subject:

just noticed today that sybase firewall is free for home use as well... I'm gunna give it a shot, see how it works (it actually looks better at identifying whats going on... one of the screens "tells" you a portscan is taking place, a DOS, and offers you the option to trace-back the signal...

Out the 100Base-T, though the router, down the OC3,
over the leased-line, off the bridge, past the firewall...
nothin but Net

Moderator Joined: 26 May 2001 Posts: 8155 Location: Borneo

Tracing back where it came from. Sounds difficult.*cough*

Posted: Wed Aug 01, 2001 5:16 pm Post subject:

I am currently using Zone Alarm free version. I like it and it seems to work fine. I went to www.grc.com and tested my firewall. They couldn't see squat.

Is there any reason to upgrade to Pro?

Also what is the link to sybase firewall, would like to check that out. Would love to trace portscans back.

Thanks.

-Geekboy

Maybe the Hokey Pokey is what it's all about! Big Smile

Moderator Joined: 26 May 2001 Posts: 8155 Location: Borneo

there is nothing beter than nmap for testing firewalls.

Mainly thru feeling elite

Posted: Wed Aug 01, 2001 7:19 pm Post subject:

my bad, its sygate, not sybase, and the
url is: http://www.sygate.com/products/shield_ov.htm

and I realize that doing a trace back isn't difficult, but it just appears to have a better interface than zonealarm does, for example:

looks pretty good, doesn't it?

Out the 100Base-T, though the router, down the OC3,
over the leased-line, off the bridge, past the firewall...
nothin but Net

Big Dog Joined: 20 Oct 2000 Posts: 3689 Location: USA

Quote:

I am currently using Zone Alarm free version. I like it and it seems to work fine. I went to www.grc.com and tested my firewall. They couldn't see squat.

Is there any reason to upgrade to Pro?

not for protection . . . the free version works just as well, as the paid one

i just wanted the extra features (don't ask what the extra features were because i already forgot, and i only bought it/re-set it up a few months ago Very Happy

)

:pimp:

Moderator Joined: 05 Dec 2000 Posts: 5941 Location: USA

Quote:
my bad, its sygate, not sybase, and the
url is: http://www.sygate.com/products/shield_ov.htm

and I realize that doing a trace back isn't difficult, but it just appears to have a better interface than zonealarm does, for example:

looks pretty good, doesn't it?

Out the 100Base-T, though the router, down the OC3,
over the leased-line, off the bridge, past the firewall...
nothin but Net

It does look good Approve Smile

... me wonders why we haven't heard more about it ... Question

w

f !!!

Posted: Wed Aug 01, 2001 9:19 pm Post subject:

the only reason I found out about it (I have NOT tried it YET) was that I was looking at their home networking router program, and they suggested using their firewall in conjunction... so the networking stuff is like $50, I wanted to see how much their firewall would cost (since I believe "technically" using zone-alarm on a network invalidates the free trial, not to mention that sometimes networking programs can conflict with firewalls, etc...)

and noticed that it was free for personal home use... kinda nice... would like to see how it works, especially since I heard black-ice firewall (is that the right name?) doesn't work worth crap

Out the 100Base-T, though the router, down the OC3,
over the leased-line, off the bridge, past the firewall...
nothin but Net

Big Dog Joined: 20 Oct 2000 Posts: 3689 Location: USA

Quote:

and noticed that it was free for personal home use... kinda nice... would like to see how it works, especially since I heard black-ice firewall (is that the right name?) doesn't work worth crap

[sarcasm]

Black Ice is great !

it MUST be because our IT dept requires it as part of your VPN connection

[/sarcasm]

seriously tho . . black ice offers you some protection from the outside, but no protection at all from the inside of your network / lan

one thing to think about though, even with ZA, is that if you are connecting through NAT and a malicious program tries to "talk to the outside world"

if that malicious program isn't on the NAT machine it's then communicating thru the "Generic Host process for Win32 services"

so it could essentially have the same authorization thru NAT as IE or any other authorized program

this is only really a problem if it is an embedded worm, trojan etc (meaning you haven't run a good virus scan recently) than can initiate communication/negotiation without pissing off the udp/netbios sensing of ZA

not a terribly large threat if you watch your systems . . but if you have enuff L.Users on the inside of your lan who don't "do what they're supposed to" then it's something that could happen despite your firewall

something that i figgured should probably be pointed out Confused

:

:pimp:

Moderator Joined: 26 May 2001 Posts: 8155 Location: Borneo

Quote:

[sarcasm]

Black Ice is great !

it MUST be because our IT dept requires it as part of your VPN connection

[/sarcasm]

seriously tho . . black ice offers you some protection from the outside, but no protection at all from the inside of your network / lan

one thing to think about though, even with ZA, is that if you are connecting through NAT and a malicious program tries to "talk to the outside world"

if that malicious program isn't on the NAT machine it's then communicating thru the "Generic Host process for Win32 services"

so it could essentially have the same authorization thru NAT as IE or any other authorized program

this is only really a problem if it is an embedded worm, trojan etc (meaning you haven't run a good virus scan recently) than can initiate communication/negotiation without pissing off the udp/netbios sensing of ZA

not a terribly large threat if you watch your systems . . but if you have enuff L.Users on the inside of your lan who don't "do what they're supposed to" then it's something that could happen despite your firewall

something that i figgured should probably be pointed out :

:pimp:

I dson't know the security model of microsoft nt but it seems highly doubtfull to me that a simple user (and the programs he runs) can make unlogged connections

Posted: Fri Aug 03, 2001 1:37 pm Post subject:

no no no no no.. thats not what he;s saying

he's saying that it all gets logged, but because of running NAT it all shows up as win32 app.. its crappy programming

not that it matters, rumor has it that 75% of all microsoft employes utilize black ice on their own systems... *rolls his eyes*

I asked someone about sygate firewall today, and they said it works pretty good, about as good as ZoneAlarm.. but that its a real pain to set up, and its finicky...takes allot of fine tuning to get just right...

Out the 100Base-T, though the router, down the OC3,
over the leased-line, off the bridge, past the firewall...
nothin but Net

Moderator Joined: 26 May 2001 Posts: 8155 Location: Borneo

You are right. It's so obvious if you think about it. You can't see which program is running on the other machine. Even claiming that it is a win32 program is not even always true

Posted: Fri Aug 03, 2001 11:37 pm Post subject:

so does anyone know what the little 'Q' means on ZoneAlarm?

Toxin wrote:

Toxin wrote:

Quote:

Quote:

Quote:

Quote:

Toxin wrote:

Toxin wrote: