Posted: 4/2/2007 6:23:46 PM EDT
|
I've used Zonealarm for the longest time, but I am tired of using it. What's the best free firewall that allows me to specify exact ports that I wish to have open? |
|
There are linux distros that are specifically intended to be firewalls. You might look into that. Know what else (and this is coming from a network engineer who gets Cisco gear at 48% off list) - just grab a Linksys router and use that. It will meet the requirements you listed. |
I'm just looking for a software firewall for Windows XP, that's all 
|
Chicken.  You really should run m0n0wall on a Soekris Net4801 platform in a custom enclosure. The shizzle.  Okay, fine. Try Comodo. Better than ZoneAlarm. Alpine |
I hear people dog it all the time. I've been using it since 4.x, and have had not a LICK of problems with it. I know what programs access the internet when and how, and can deny them all I want with just a few clicks of a mouse. Why trouble trouble? |
I looked at m0n0wall, very slick. I am building a IPCOP firewall right now, should have it all done when I get home from work tonight, then I will do a couple of days of testing it before put it online. |
Same here.But,i do have a router aswell |
IPCop's excellent. I'm going to check it out next because it supports URL filtering via urlfilter, which is currently not a feature of m0n0wall. Alpine |
| m0n0wall is simplier than most software firewalls that run on Windows. I have started using m0n0wall instead of Unix based firewalls unless there is a real need to do something complicated. I would never recommend a software firewall that runs on Windows. If the Windows Firewall is not good enough (and for 95% of the population it is) then you should use something like m0n0wall or one of the other Linux firewall distributions. |
Comodo's less obtrusive than ZA and a smaller footprint. If Zone Alarm is working for you then don't mess with a good thing. The OP wanted an alternative, so I suggested one. Alpine |
Subnet, can you give me some links? I might have an old PC i want to try to use for this. |
M0n0Wall is an awesome program. I used it over IPCOP in my HIPERC class. Very neat. |
Be a man. Get a Netscreen/Juniper Networks hardware firewall (5XP or 5GT). Screw those software only firewall toys. You should be able to handle 500,000 TCP resets an hour and malformed packets at flood rates or your just an amateur.  Gimme your IP and I'll have ANY software only firewall tested for free by ROK/Chicom DinWaDinkaSan. 
|
How are you connected to the internet? Do you run any services??? Why I ask: I have a laptop or 3 w/w2k. at home, in the office I'm behind some sort of router (Linux, lynksys thingie etc) and there is no need for anything else. When I dial up (out of town where only dial up is available) I have a second boot option that uses MS "IPSec" which shouldn't be confused w/IPSec ;~)>. I keep a registry template for new installs that imports the firewall. Havn't played w/XP enough to know if it can do the same. Always turn off unnessary services (plenty in windows), don't use IE, outlook and don't open strange email attachments or better yet, scan all your mail. Most windows software firewalls are a PIA from what I've seen, like the Apple commercials (allow? deny? are ya sure?). BTW, I prefer a Linux firewall - using and building them for many years and have some VERY tweaky security. Worth the effort if you're technically enclined. |
|
Words of wisdom... What's REALLY important is not to open email that you don't know exactly what it's about and where it comes from. Listen folks, just because you have an Antivirus program running on your computer doesn't mean you're in the cone of "no evil". A/V CAN'T STOP THE THINGS IT DOESN'T HAVE SIGNATURES FOR. McAfee, Symantec and Trend can't possibly know the signature of every virus/trojan/malware out there, because they have to discover them themselves. Custom written evilness rears it's ugly head everyday, especially from the Chinese. Once ia little evil app has installed itself, even though the A/V has been updated with the newwest signature, the thing has already begun to hide itself in your system. So that beautiful slideshow attachment someone sends you of the towers falling with the eagle flying and the patriotic music.....think twice before you click. And as much of pain as it is, rebuild your system regularly from scratch, because you never know if there's a BOTNET on it talking to the mothership right through your firewall. Don't think it can't happen? I didn't think so either. 
|