Author Topic: Replacement for ZA free?  (Read 43133 times)

0 Members and 1 Guest are viewing this topic.

Offline MikeBCda

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2247
Replacement for ZA free?
« on: February 28, 2007, 09:42:16 PM »
I suspect ZoneLabs will find they've pulled a major blunder with their new all-in-one approach -- I for one will not upgrade my ZA any more unless and until they back off and once again offer ZA by itself, and I'd bet they lose a lot of other faithful users too.

I'll stick with my 6.5.737 as long as it stays functional, but I'm fairly sure its days are numbered.

I know there's been suggestions here and there for other free firewalls, but it would be handy to see a nutshell summary here of the more popular ones along with a comparison of their respective pros and cons.

Thanks and best,
Mike
Intel Atom D2700, 2 gig RAM, Win 7 x64 SP1 & IE-11, Firefox 51.0
(default). 320 gig HD, 15Mb DSL, Win firewall, Avast 12.3.2280 free, SpywareBlaster, MBAM Prem., Crypto-Prevent

Offline OrangeCrate

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 798
Re: Replacement for ZA free?
« Reply #1 on: February 28, 2007, 10:04:53 PM »
^,

Many of the old timers on the ZA forum think that 5.5.094 was the last good version of the "pure" firewall. If you remember correctly, the majority of the vsmon problems started with version 6.

After trying 6.something, which was an absolute mess, I reverted back, and have been using it ever since. It does it's job, no more, no less. If you're interested, you can find it here:

http://download.zonelabs.com/bin/free/information/znalm/zaReleaseHistory.html

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
Re: Replacement for ZA free?
« Reply #2 on: February 28, 2007, 10:33:42 PM »
Comodo makes a good free firewall. Here's a review.

http://www.pcmag.com/article2/0,1759,1969207,00.asp
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Replacement for ZA free?
« Reply #3 on: February 28, 2007, 10:52:54 PM »
Hi marc57,

My ZA free functions fine, but I have added some goodies into the proggie: fwconwatch, ipfilter, paranoid_conf, secure router, and a personal flaw of IPF WADM of a ZAL-O-FIREWALL inside ZoneAlarm free as it comes by default. So I have some extra protection in the lower realms. No problems or hick-ups,

polonus

Just a taste:

Code: [Select]
#!/usr/local/bin/perl
#----------------------------------------------------------------------------
#
#  fwconwatch.pl - Monitor FireWall-1 connection table
#
#  www.sabernet.net
#
#
#  By default this script checks the status of the connection table every
#  60 seconds.  The administrator will be notified by page/email if the
#  connection table has reached the warning percentage.

#  The -f switch causes an output line to be displayed for each check.
#  The -F switch causes an output line to be logged via syslogd.
#
#  Distributed under the terms of this General Public License
#  http://www.gnu.org/copyleft/gpl.html
#
#  Revision History:
#     11-Jun-2000  1.3  Added switch info for fwtable.pl ver1.1beta
#     08-Sep-1999  1.2  Added features provided by masato@mulan.aero.org
#     30-Jul-1999  1.1  Added cpu utilization check (SunOS 5.x)
#     30-Jul-1999  1.0  Script completed

#----------------------------------------------------------------------------
#
#  TARGET  :  Target FW host
#
#  LIMIT   :  Number of slots in the connection table.  Details can be found
#             in PhoneBoy's FW1 FAQ: http://www.phoneboy.com/fw1/faq/0289.html
#
#  WARN    :  Percentage at which a page/email will be sent
#
#  SRC_MAX :  Number of connection sources to report on
#
#  SCRIPT  :  Path to Lance Spitzner's fwtable.pl script
#             http://www.enteract.com/~lspitz/fwtable.html
#
#  PAGE    :  Address to send warning page to
#
#  EMAIL   :  Address to send connection report to
#
#  SLEEP   :  Number of seconds to sleep between checks
#
#----------------------------------------------------------------------------

$TARGET  = "localhost";
$LIMIT   = 25000;
$WARN    = 20;
$SRC_MAX = 100;
$SCRIPT  = "/etc/fw/bin/fwtable.pl -c $LIMIT";      # < ver 1.1beta
#$SCRIPT  = "/etc/fw/bin/fwtable.pl -s -c $LIMIT";  # >=  ver 1.1beta
$PAGE    = "pager\@example.com";
$EMAIL   = "infosec\@example.com";
$LOGGER  = "/usr/bin/logger -p local1.info -t FWD";
$SLEEP   = 60;

# main
{
while(1)
{
$conns = get_conns();
$percent = ($conns / $LIMIT) * 100;
if ($ARGV[0] eq '-f')
{
$date = `date`;
chop($date);
print "$date $percent% $conns\n";
}
elsif (($ARGV[0] eq '-F') && defined($LOGGER))
{
system("$LOGGER connections=$conns $percent%");
}

if ($percent >= $WARN)
{
`echo \"fw conn $percent%\" | mailx $PAGE`;
report_top();
}

check_cpu();
sleep($SLEEP);
}
}

#
# get_conns : returns the number of slots filled in the connection table
#
sub get_conns
{
$_ = `/etc/fw/bin/fw tab -t connections -s $TARGET | tail -1`;
chop();
$_ =~ /(\d+)$/;
$1;
}

#
# report_top : reports the top n connection sources
#
sub report_top
{
my ($top, %table);

open(DATA, "$SCRIPT |");
while(<DATA>)
{
if ($_ =~ /^(\d+\.\d+\.\d+\.\d+)/)
{
$table{$1}++;
}
}
close($DATA);

my($i) = 0;
foreach $key ( sort { $table{$b} <=> $table{$a} } sort(keys %table) )
{
if ($i < $SRC_MAX)
{
$top .= sprintf("    %-20s %-8d\n", $key, $table{$key});
$i++;
}
}

open(MAIL, "| mailx -s \"FW Connection Table $percent%\" $EMAIL");
print MAIL "Top $i connection sources:\n\n$top";
close(MAIL);
}


#
# check_cpu : checks the cpu stats and sends an alarm if warranted
#
sub check_cpu
{
        $_ = `iostat -c 5 2 | tail -1`;
        my(@stats) = split;

        if ( ($stats[0] > 85) ||   # user
             ($stats[1] > 85) ||   # kernel
             ($stats[2] > 70)   )  # iowait
        {
                `echo \"fw cpu us:$stats[0] ke:$stats[1] io:$stats[2]\" | mailx $PAGE`;
        }
}

« Last Edit: February 28, 2007, 11:01:11 PM by polonus »
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48523
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: Replacement for ZA free?
« Reply #4 on: February 28, 2007, 11:19:40 PM »
ZoneAlarm isn't Vista ready or compatible....  :'(
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline OrangeCrate

  • Avast Evangelist
  • Advanced Poster
  • ***
  • Posts: 798
Re: Replacement for ZA free?
« Reply #5 on: March 01, 2007, 12:41:26 AM »
ZoneAlarm isn't Vista ready or compatible....  :'(

Wow, I didn't know that. I haven't paid any attention to ZA for ages. I think the last time I was on their forum is when you and I tag teamed, and went after them...

So, to get up to speed, I just cruised through several pages on their forum. What a mess. It seems to go from bad to worse for Check Point doesn't it? Well, if you're on XP or 2000, 5.5.094 is still the best choice in my opinion (All firewall - All the time).

CharleyO

  • Guest
Re: Replacement for ZA free?
« Reply #6 on: March 01, 2007, 01:27:31 AM »
***

I stopped upgrading ZA Free at version:6.1.744.001 which has worked perfectly since I installed it. I have no plans to upgrade ZA until all the junk is taken out of it. This version works well for me.    :)


***

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Replacement for ZA free?
« Reply #7 on: March 01, 2007, 01:39:34 AM »
Outpost pro isn't Vista compatible either, not that that concerns me, but it is a poor excuse they are saying it takes time to make the firewall compatible with a new OS, I guess a 5 year run up isn't enough for them to start planning.

Outpost Pro is a good firewall but many users are very disappointed at this Vista compatibility, pathetic I call it.
Quote
Vista Support Plans

The current version of Outpost Pro 4.0 and the first version of the upcoming Outpost Pro Security Suite 2007 will not be Vista-compatible. Converting security products to run smoothly on Vista is a long a complex task, and we will keep you posted via this newsletter and blog postings as we move towards beta versions of both products.

Vista compatibility is a huge challenge for the entire information security industry. Vista is a completely new operating system with a significantly different and more complex architecture. This means that Outpost Pro Firewall and the Security Suite for Vista must be completely new applications, with new engines and a user interface to provide the level of protection and usability you’ve come to expect from Agnitum.

I think they have really shot themselves in the foot, spending time in developing a new product to the detriment of Vista Compatibility, who is going to but a product that isn't Vista compatible ?
« Last Edit: March 01, 2007, 01:41:46 AM by DavidR »
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

justin1278

  • Guest
Re: Replacement for ZA free?
« Reply #8 on: March 01, 2007, 02:56:09 AM »
I suspect ZoneLabs will find they've pulled a major blunder with their new all-in-one approach -- I for one will not upgrade my ZA any more unless and until they back off and once again offer ZA by itself, and I'd bet they lose a lot of other faithful users too.

I'll stick with my 6.5.737 as long as it stays functional, but I'm fairly sure its days are numbered.

I know there's been suggestions here and there for other free firewalls, but it would be handy to see a nutshell summary here of the more popular ones along with a comparison of their respective pros and cons.

Thanks and best,
Mike

I recommend Comodo Firewall, 2.4 is currently working very well, and 3.0 which will be released in a couple months will be Vista compatible.

What do you mean by offering ZA by itself, they still seem to be offering Zone Alarm Pro, and Free as standalone products.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 88895
  • No support PMs thanks
Re: Replacement for ZA free?
« Reply #9 on: March 01, 2007, 03:03:45 AM »
The new ZA Free now comes encumbered with an number of extras on a trial basis in the hope you will purchase the upgrade.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 24.2.6105 (build 24.2.8918.824) UI 1.0.799/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline Marc57

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1944
  • KISS Rules The World!!!
    • KISS Army
Re: Replacement for ZA free?
« Reply #10 on: March 01, 2007, 05:10:46 AM »
ZoneAlarm isn't Vista ready or compatible....  :'(

Come to think of it, Neither is Comodo. Does anyone have any experience with Vista's firewall? I've read that it's hard to configure it to block outbound traffic.



To justin, do you know that your e-mail address is being shown?
« Last Edit: March 01, 2007, 05:46:03 AM by marc57 »
You Wanted the Best You Got the Best the Hottest Band in the World KISS!!!

Offline Vladimyr

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1639
  • Super(massive black hole) Poster
Re: Replacement for ZA free?
« Reply #11 on: March 01, 2007, 05:25:56 AM »
No idea if its Vista-compatible but another contender is R-Tools at: http://www.r-firewall.com/
BTW, their 'R-Drive Image' is better (and cheaper) than latest Symantec 'Ghost'.
There is a way that seems right to a man,
       but in the end it leads to death
.” - Proverbs 16:25

Offline polonus

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 33891
  • malware fighter
Re: Replacement for ZA free?
« Reply #12 on: March 01, 2007, 07:59:38 AM »
Hi folks,

The really irritating thing with ZoneAlarm is that TrueVector will collaps when using the Torpark anonimity browser, and I haven't read the cause of this anywhere on the net. Bad point for ZA there.

polonus
Cybersecurity is more of an attitude than anything else. Avast Evangelists.

Use NoScript, a limited user account and a virtual machine and be safe(r)!

avatar2005

  • Guest
Re: Replacement for ZA free?
« Reply #13 on: March 01, 2007, 08:31:29 AM »
As for me I'm get used to Comodo, it works fine with Win xp, more over I don't have money & don't want to swich on Vista.
Besides I've tried ZA & it sloweddown my PC very much :(

Fast

  • Guest
Re: Replacement for ZA free?
« Reply #14 on: March 01, 2007, 11:46:24 AM »
Hi guys.
I have good experiences with a chinese firewall called Filseclab 3.0
Works well and has a "don't nag me" option to block any new progs without asking permission.
It can be found at www(dot)filseclab(dot)com

Bye,
Fast