BetaONE will rise again!

BetaONE will rise again! (http:\\b1.hcanet.com\forum/index.php)
-   Internet Security and Privacy (http:\\b1.hcanet.com\forum/forumdisplay.php?f=38)
-   -   You Might Think Your Firewall Is Protective..* (http:\\b1.hcanet.com\forum/showthread.php?t=9529)

belthazor 13th Aug 03 07:56 PM

This scared the hell out of me. I was using ZoneAlarm and a linksys combined.
Do yourself a favor and run this test:
http://www.pcinternetpatrol.com/down...hp?from=Patrol

Dave 13th Aug 03 08:23 PM

I use ZoneAlarm also, when I tried it ZA asked if I should allow explorer to access the internet.
I answered no and it said I was well protected.

Did you answer yes to let it out?
Dave

Voodoo 13th Aug 03 08:26 PM

Is this a gimic to sell their products?* ???

Cheerz
Dave ?

EDIT:  If I go to www.grc.com and test my firewall, I get a perfect score.  So who is right and who is wrong?

belthazor 13th Aug 03 08:57 PM

Dave, ZA asked me nothing.
And DL, as far as whether it's a gimmick, if it told you private info I have to say there's something to it.
They are also a member of the BBB for what that's worth.

belthazor 13th Aug 03 08:59 PM

And here's what tucows has to say:

Information:
This personal firewall manages applications that send or receive data, providing identification of individual executable modules. It creates a virtual security network and directs potentially dangerous files from all PCs into a single gateway where experts investigate and classify them as good or bad in real time.
Along the right side of this review, you can also download pcAudit. This is a free tool used to simulate an attack by a hacker. It demonstrates the need for application control at the level of individual modules. It shows how lacking this allows a hacker to bypass a conventional firewall without being noticed.

A hacker can even hijack many popular personal firewall programs and use them to send back data. This tool lets any PC user determine whether their PC is vulnerable to intrusion. This may be the case even if you are behind a personal or a corporate firewall. Upon completion of your pcAudit, you will receive a detailed evaluation report.

adams 13th Aug 03 09:47 PM

yep, thats scary source.  Sygate didn't even ask either, just allowed it to go through.

KingCobra 13th Aug 03 11:13 PM

I tried that program and it got the snap shot  of my screen and the dummy PW I entered. It called out without any alert from NIS 2003 set on HIGH LEVEL. Why? Because it calls out using port 80, the port used by MS IE. I setup a rule in NIS to notify me everytime traffic in & out of port 80 was attempted and to log it. Although the only rules I can set up in NIS are to block/permit/monitor. I can't find any way to configure it to block and ask me if I want to permit or bypass the rule.

unicorn 13th Aug 03 11:19 PM

Outpost makes it again. Cool.
(Beside of that I wonder why they collect email-addies, and IPs...)

Dave 13th Aug 03 11:28 PM

1 Attachment(s)
Sorry, I should have mentioned I was in Windows 98. I guess that makes the difference.

Zone Alarm gives me a message about windows explorer wanting access to: 216.150.224.183:HTTP
I click no and get this screen (I made it a little smaller to fit).
Dave

unicorn 13th Aug 03 11:32 PM

Source, check your settings; maybe you allready have allowed Explorer to take trips around the Net? (But why should anyone let it?)

~*McoreD*~ 13th Aug 03 11:57 PM

OMG. This is scary source! NPF2003 didn't notice the data transfer at all.

Bads 14th Aug 03 04:40 AM

I will do the test right now  ;)

Thanks for the info

DigitalSteel 14th Aug 03 07:03 AM

</span><blockquote><span class="smallfont">Quote:</span><hr size="1" />Originally Posted by (.unicorn @ Aug 13 2003, 05:32 PM)
Source, check your settings; maybe you allready have allowed Explorer to take trips around the Net? (But why should anyone let it?) <hr size="1" /></blockquote><span class='postcolor'>
People 2003 unlike 2002 has that NEW feature that [dont know about otehr firewalls]

Where you can scan for apps that use the net or not and let the default ones access the net


NOW

If you havent changed your setttings go to 1.Personal Firewall click on configure then Program Control and See if you have Windows Explorer.exe or Microsoft Windows Explorer [it maybe an exe file] on the list cause most things on the list are allowed or configured to be allowed

NOW

if its not on there then Ban it from getting net access [Note i am talking about WInddws eXplorer not Internet explorer

Then

go back and retake that test and see what results you get...........................* :blink:

KingCobra 14th Aug 03 10:01 AM

Thanks DigitalSteel* & Source for bring this to my attention. B)

Now I too received this when testing:


belthazor 14th Aug 03 10:19 AM

Where did my post go?!?!?
Anyway, I disabled in/out TCP in port 80 in ZA and I am now protected.

~*McoreD*~ 14th Aug 03 02:09 PM

</span><blockquote><span class="smallfont">Quote:</span><hr size="1" />Originally Posted by (DigitalSteel @ Aug 14 2003, 02:03 PM)
1.Personal Firewall click on configure then Program Control and See if you have Windows Explorer.exe or Microsoft Windows Explorer [it maybe an exe file] on the list cause most things on the list are allowed or configured to be allowed

if its not on there then Ban it from getting net access [Note i am talking about WInddws eXplorer not Internet explorer

go back and retake that test and see what results you get...........................*
<hr size="1" /></blockquote><span class='postcolor'>
Wow. Thanks heaps for the PM about your reply here and Digitalsteel thanks again for this great tip. As you said, I did:
Configure > Program Control > Windows Explorer > Block All

And my computer is well proctected as well.&nbsp; :D

adams 14th Aug 03 04:09 PM

ok sygate works when you block windows explorer.&nbsp; thanks DS.

Bads 14th Aug 03 04:14 PM

The first time I run the PCaudit, the program list all my documents&nbsp; :(&nbsp; :angry:

Now with your recommandations and turning my ZA security higher, my PC is safe&nbsp; ;)

Thanks

roadworker 14th Aug 03 07:33 PM

</span><blockquote><span class="smallfont">Quote:</span><hr size="1" />Originally Posted by (adams73533 @ Aug 14 2003, 03:09 PM)
ok sygate works when you block windows explorer.* thanks DS. <hr size="1" /></blockquote><span class='postcolor'>
Did you allow explorer.exe acces&nbsp; when you configured Sygate for the 1st time....??? :blink:&nbsp; :blink:
I didn't.....it's an&nbsp; invitation to get M$ spying on you.... :ph34r: ......they are worse than a hacker.. :lol:

DigitalSteel 14th Aug 03 08:07 PM

its always 1 little file that can do the most :(

glad i could help :)

Firefox 14th Aug 03 08:16 PM

I just saw this on Neowin.* It is the next step, If you use IM it adds a little more security.


</span><blockquote><span class="smallfont">Quote:</span><hr size="1" />Originally Posted by

Security specialist Zone Labs has launched software designed to protect instant-messaging communications, targeting the growing number of IM users on both the consumer and business sides.

Best known for its ZoneAlarm firewall application, Zone Labs now is offering IMSecure Pro, which supports the most widely used AOL Instant Messenger , MSN Messenger and Yahoo (Nasdaq: YHOO) Messenger services.

The massive volume of IM message being transmitted, combined with both behavioral and technological risks associated with Internet communications, has created a demand for the type of application developed by Zone Labs, said Fred Felman, company vice president of marketing.

"Our product allows consumers and businesses to use IM on their existing service and client, and on the enterprise side it does not require rebuilding the IM framework," he told NewsFactor. Felmer cited protection from buffer overload attacks, like the Blaster worm that hit Windows this week, along with privacy protection through a clear text medium, as particular attributes of IMSecure Pro.

The software is now available to consumers only; the version that will be bundled with the company's enterprise-protection product will secure the medium for all users, Felmer said.
<hr size="1" /></blockquote><span class='postcolor'>


The only bad thing about the free version is that it is only good for one account.
:( http://www.zonelabs.com/store/conten...u_list_ims.jsp

Voodoo 14th Aug 03 09:07 PM

@DigitalSteel.&nbsp; Thanks a million for the tip.&nbsp; It worked!&nbsp; I wonder why Symantec, to name but one, did not set up a rule for this in the first place?

Thanks again.

Cheerz
Dave

DigitalSteel 14th Aug 03 11:08 PM

</span><blockquote><span class="smallfont">Quote:</span><hr size="1" />Originally Posted by (DL @ Aug 14 2003, 03:07 PM)
@DigitalSteel.* Thanks a million for the tip.* It worked!* I wonder why Symantec, to name but one, did not set up a rule for this in the first place?

Thanks again.

Cheerz
Dave
<hr size="1" /></blockquote><span class='postcolor'>
They did its to allow all access when you let NIS configre for it

i dont know why they did it that way though

2002 it didnt have that in it at all

hopefully 2004 wont have that in it

Shiromagius 15th Aug 03 04:05 AM

Thanks DigitalSteel!! Worked just great.&nbsp; I always wondored why windows was set up so you can browse the net from Explorer.&nbsp; You could just open up my computer and just type in a URL in your location and go there.&nbsp; I like having to open up IE to do that now though. Thanks!

Nemesis 15th Aug 03 06:36 AM

I can't even access the site!&nbsp; It must be down.&nbsp; I'll try later.


All times are GMT +1. The time now is 03:30 AM.

Powered by vBulletin® Version 3.6.5
Copyright ©2000 - 2025, Jelsoft Enterprises Ltd.