Sorry, I don't trust MS enough to use their Firewall

Post #169,621 by Steven A S 8/17/04 9:17:35 AM Reply	Sorry, I don't trust MS enough to use their Firewall I use ZA Pro just as a second stage firewall to prevent programs from accessing the net without my consent. Some of what I block is MS software. Too many exploits in MS software, and too many cases of it calling home in the past. As far as ZA, I've not had any problems with it, even when running highly intensive programs like Doom3. ~~~)-Steven---- "I want you to remember that no bastard ever won a war by dying for his country. He won it by making the other poor dumb bastard die for his country..." General George S. Patton
Post #169,625 by deSitter 8/17/04 9:34:59 AM Reply	Re: Sorry, I don't trust MS enough to use their Firewall My advice was for him to get a wireless router with built-in firewall. I can't see the sense in putting a firewall on a client. This is like donning a Nomex racesuit and sitting on the engine to drive to 7-11. -drl
Post #169,641 by pwhysall 8/17/04 10:31:52 AM Reply	Agreed. Separate hardware firewalls are not only conceptually and practically better in every way, they're cheap, too. Peter [link\|http://www.debian.org\|Shill For Hire] [link\|http://www.kuro5hin.org\|There is no K5 Cabal] [link\|http://guildenstern.dyndns.org\|Blog]
Post #169,644 by ChrisR 8/17/04 10:34:18 AM Reply	Personal firewalls suck but... ...if your laptop copulates with several different networks, or you plug into a hotel LAN, then you don't necessarily have the advantage of having a hardware firewall available.
Post #169,645 by deSitter 8/17/04 10:35:50 AM Reply	Re: Personal firewalls suck but... I very much doubt that hotels are unprotected. But, given the level of smarts these days, anything is possible. -drl
Post #169,648 by ChrisR 8/17/04 10:38:49 AM Reply	Blaster infected several hotel networks And most ISP's seem to take the attitude of not blocking any particular ports (at least that's been the attitude that I've seen).
Post #169,650 by inthane-chan 8/17/04 10:41:31 AM Reply	And that's the way I like it. Block ports on a user-by-user basis if somebody has turned into a Zombie - better yet, cut their connection, and don't reconnect it until they clean their PC. I just want a fat pipe, no blocked ports, and the right to Do As I Will with my hardware. What will we do when we are Gods?
Post #169,677 by drewk 8/17/04 1:04:20 PM Reply	Aren't you supposed to be a cynic? I read an article a while back where the author plugged his laptop into a hotel network, clicked Network Neighborhood, and promptly saw a dozen other hotel guests' machines. Granted, they shouldn't have been sharing, but if I were staying there I'd like to think other guests don't have a direct line to my system. === Implicitly condoning stupidity since 2001.
Post #169,721 by deSitter 8/17/04 4:32:26 PM Reply	Thou shalt not run NetBIOS over TCP/IP -drl
Post #169,649 by Steven A S 8/17/04 10:39:27 AM Reply	Call me paranoid... I have a router set up as my primary firewall, but use ZA as my secondary because a router will not stop a trojan, adware or other unsafe programs from connecting to the internet from inside your network. ~~~)-Steven---- "I want you to remember that no bastard ever won a war by dying for his country. He won it by making the other poor dumb bastard die for his country..." General George S. Patton
Post #169,653 by pwhysall 8/17/04 10:56:54 AM Reply	...and neither will ZA, if compromised. This is one of the reasons I dislike ZA. It makes you trust that which should not be trusted - i.e. a firewall product running right there on the thing it's supposed to protect. If the Bad Code executes, you're already dead and the box is already compromised. ZA preventing its outbound connection is closing the stable door after the horse has bolted. Peter [link\|http://www.debian.org\|Shill For Hire] [link\|http://www.kuro5hin.org\|There is no K5 Cabal] [link\|http://guildenstern.dyndns.org\|Blog]
Post #169,643 by pwhysall 8/17/04 10:33:00 AM Reply	I don't trust any firewall product... ...that deems "writing skins" as worthy of engineering effort. Peter [link\|http://www.debian.org\|Shill For Hire] [link\|http://www.kuro5hin.org\|There is no K5 Cabal] [link\|http://guildenstern.dyndns.org\|Blog]
Post #169,646 by deSitter 8/17/04 10:36:06 AM Reply	ROFL -drl

Welcome to IWETHEY!