Author Topic: Dual layer firewall system :)  (Read 11735 times)

0 Members and 1 Guest are viewing this topic.

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9384
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Dual layer firewall system :)
« on: September 01, 2004, 01:36:53 PM »
I just established a very powerful firewall system.
Its especially interesting for all those that think that Windows firewall is unsecure because it lacks outbound protection and are searching for low overhead firewall.

Here is the solution :)

Outpost 1.0 + Windows Firewall (i use SP2 ICF)

Outpost has certain problems with Stealthing ports but provides program control and outbound protection,Windows Firewall provides great inbound protection and incredible port Stealthing capability.
When using these two together you get incredible dual layer protection with minimal possible overhead.
Also there is no communications problems,because eMule runs with High Id (communications are not limited in any way),also all other programs run without problems.

You can get Outpost 1.0 Free here:
www.agnitum.com
Visit my webpage Angry Sheep Blog

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:Dual layer firewall system :)
« Reply #1 on: September 01, 2004, 01:40:45 PM »
I got a quadruple layer protection
- Kerio
- www.ntsvcfg.de
- windowsupdates
- Brain 1.x
 ;D ;D ;) ;)

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31302
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re:Dual layer firewall system :)
« Reply #2 on: September 01, 2004, 01:42:07 PM »
Better is a router/hardware firewall and a software one on the comp. ;D

Even better is puling the connection plug out ;D ;D ;D

ps: ICF isn't in SP2, it is called Windows Firewall.
« Last Edit: September 01, 2004, 01:44:59 PM by Eddy »

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9384
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Dual layer firewall system :)
« Reply #3 on: September 01, 2004, 01:48:28 PM »
I know,i was just to lazy to write full name. But we all know what ICF means :P

I'd use Kerio instead,but its far from being so light on resources as Outpost is and its lame with application rules,because it asks for each and every different IP/Port even if the same application (already Allowed) tries to connect.
Visit my webpage Angry Sheep Blog

Offline whocares

  • Super Poster
  • ***
  • Posts: 1698
  • I'm not a llama! :-)
Re:Dual layer firewall system :)
« Reply #4 on: September 01, 2004, 01:51:05 PM »
it asks for each and every different IP/Port even if the same application (already Allowed) tries to connect.

Imho even with Kerio 4.x, you can set/edit the application-rule to include all IP's/ports, right .. ?

 ???

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9384
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Dual layer firewall system :)
« Reply #5 on: September 01, 2004, 01:56:15 PM »
As far as i was testing Kerio,not. But i can be wrong...
Visit my webpage Angry Sheep Blog

Staind

  • Guest
Re:Dual layer firewall system :)
« Reply #6 on: September 01, 2004, 06:19:54 PM »
Is outbound really that important though? I mean, if you run frequent trojan scanners, anti virus, etc. and have something blocking inbound (WinFirewall) I think you should be ok.

Online DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 85763
  • No support PMs thanks
Re:Dual layer firewall system :)
« Reply #7 on: September 01, 2004, 08:36:23 PM »
Unless you can 100% guarantee your system will not catch a new trojan infection, then it is prudent to have outbound protection.

After all do you want to take the risk of your username/password, account details, etc. in the hands of some fraudsters/criminals organisation, don't wory about outbound protection.
Windows 10 Home 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 21.8.2487 (build 21.8.6586.693) UI 1.0.666/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro/ Avast! Mobile Security

Offline lee20

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2326
  • The only true failure is when you give up
Re:Dual layer firewall system :)
« Reply #8 on: September 01, 2004, 11:05:09 PM »
2 things

1) i thought if you have 2 firewalls, they conflict?

2) Why have 2 when u can just get  in/outbound protection firewall all in one.

--lee

"Anyone who has never made a mistake has never tried anything new."-Albert Einstein

Comodo Firewall, Avast 4.8, SpywareBlaster, Spybot + superantispyware, PeerGuardian and ALL software patched!

KezzerDrix

  • Guest
Re:Dual layer firewall system :)
« Reply #9 on: September 01, 2004, 11:06:40 PM »
Rejzor, why not just use windows firewall and an appwall?  Like one of the ones I listed here

http://forum.avast.com/index.php?board=1;action=display;threadid=6858

Low overhead, no probs with p2p's

Just curious?
« Last Edit: September 01, 2004, 11:08:09 PM by KezzerDrix »

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9384
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Dual layer firewall system :)
« Reply #10 on: September 02, 2004, 02:56:03 PM »
@lee16
After some tests i found out that Windows Firewall has the best inbound protection of all firewalls. Especially in field of Stealthing ports where Kerio fails. Outpost Firewall 1.0 has some problems with inbound,but it has a good outbound protection and provides max info possible for all connections that go through machine.

I can track where did some program connected,through which port/protocol,i can track all FTP/HTTP/HTTPS URLs,track sent/recived data for each program.

These two firewalls certanly work together,because all ports are Stelthed at all times,programs always ask for outbound and it can also detect changes in program. There was also no conflicts with any program that i use,so i can say its works perfectly.
Visit my webpage Angry Sheep Blog

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 46136
  • 61 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re:Dual layer firewall system :)
« Reply #11 on: September 02, 2004, 06:34:00 PM »
RejZoR
Does the Windows Firewall beat ZA on inbound stealth and protection?
Free avast! Security Seminar: http://bit.ly/2N1eaR2  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v21H2 64bit, 16 Gig Ram, 1TB SSD, AvastOmni 21.6, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq

Offline RejZoR

  • Polymorphic Sheep
  • Serious Graphoman
  • *****
  • Posts: 9384
  • We are supersheep, resistance is futile!
    • RejZoR's Flock of Sheep
Re:Dual layer firewall system :)
« Reply #12 on: September 02, 2004, 08:00:12 PM »
Inbound is the same i belive. ZA has never had any Stealthing problems.
Visit my webpage Angry Sheep Blog

Offline lee20

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 2326
  • The only true failure is when you give up
Re:Dual layer firewall system :)
« Reply #13 on: September 02, 2004, 08:40:37 PM »
How do you rate syagate's inbound protection compared to ZA and Windows firewall.

In fact would you say the outbound is just as good as outpost/ZA aswell?

--lee
« Last Edit: September 02, 2004, 08:41:07 PM by lee16 »

"Anyone who has never made a mistake has never tried anything new."-Albert Einstein

Comodo Firewall, Avast 4.8, SpywareBlaster, Spybot + superantispyware, PeerGuardian and ALL software patched!

Offline CharleyO

  • Avast Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7085
  • Be alert for error code - ID 10T
Re:Dual layer firewall system :)
« Reply #14 on: September 03, 2004, 10:39:38 AM »
*
from RejZoR
Quote
Inbound is the same i belive. ZA has never had any Stealthing problems.


So, if ZA stealths inbound so well and has outbound protection, what more is needed? Why make it more complicated than need be?    ???  

*
Self-built desktop (8 years old) - AMD64 3200+_Gigabyte GA-K8NS Ultra-939_4 gb RAM_GeForceFX 5800w/256 ram_XP/SP3_Avast 7_MBAM_ZA Free __and__ Toshiba Satellite Laptop_W7-64bit_ 4 gb Ram_Avast 8_MBAM