Jetico problems

[ghost2003]

Im having a lot of problems getting jetico to work. The problem is that it doesnt seem to detect some apps that are running. For example, it never sees firefox. It wont prompt me to make a rule and it wont show in the applications tab. So no matter what rule I set it cant connect to the internet. If I set the firewall to allow all it will work and show up in the application tab but as soon as I set it back to Optimal Protection if I click on a link in FF it will load for half a second and do nothing.
It works 50/50 with some programs like skype and wont work at all with others like firefox and IE but will work without a problem with others like NOD32. Its really starting to frustrate me.

[pilotbiffster]

-{ Quote: "Im having a lot of problems getting jetico to work. The problem is that it doesnt seem to detect some apps that are running. For example, it never sees firefox. It wont prompt me to make a rule and it wont show in the applications tab. So no matter what rule I set it cant connect to the internet. If I set the firewall to allow all it will work and show up in the application tab but as soon as I set it back to Optimal Protection if I click on a link in FF it will load for half a second and do nothing.
It works 50/50 with some programs like skype and wont work at all with others like firefox and IE but will work without a problem with others like NOD32. Its really starting to frustrate me." }-


Have you tried resetting the optimal rules back to factory default? Maybe you inadvertently created a rule that is causing the behavior? Just a thought ....

[ghost2003]

-{ Quote: "Have you tried resetting the optimal rules back to factory default? Maybe you inadvertently created a rule that is causing the behavior? Just a thought ...." }-
I went as far as reinstalling it.

[ghost2003]

I tried again today and now it works. Up to now (now that it works) I like it. Much better that sygate that I was using.

[Kerodo]

Jetico can be quite good, especially at catching outbound stuff. The trick is to get past all the popups and annoyances. Once you get it configured right, it's really very light with no leaks, and a pretty good choice...

[NeilTaggert]

Besides the popups , another problem is the fact it doesn't run as a service.

Among other disadvantages, it wont be protecting you until you log in.

[Kerodo]

That's one thing I suggested to them ages ago, and they said they would make it so, but just never did. Looks like development on it has more or less ceased, which is kinda sad...

[NeilTaggert]

Have you tried using one of those service creating utilities to run jetico as a firewall?

[Kerodo]

Nope, never tried anything like that myself.. Do you have any links to one of them perhaps? I am curious about it...

[NeilTaggert]

Well, there are lots of such utilities flowing around.

A common use is to package Tor to run as a service, that made me wonder if it could work with Jetico.

But afer doing some research I think it won't work with a firewall.

http://www.iopus.com/guides/srvany.htm

"Due to a restriction enforced by Windows on services, a service program can either be interactive (have a Console, read keyboard input etc) or have network access (but not both at the same time). "

Tor isn't interactive, but Jetico is both interactive and needs network access

But maybe other methods will work, I don't know, I haven't tried.

[Kerodo]

Ok, thanks. I will check it out later and see what happens..

[brjoon1021]

I e-mailed them a couple of weeks ago and they assured me that there was a new firewall version coming out in the next couple of months.

B.

[Kerodo]

That would be cool. Development has slowed considerably, but it's good that it's not stopped altogether then. Good news... :)

[CrazyM]

Another utility for running programs as services worth looking at is FireDaemon (http://www.firedaemon.com/).

Regards,

CrazyM

[Kerodo]

Thanks CrazyM, I will check that out as well.

[ghost2003]

As much as I liked it, it is still giving me lots of trouble. And there doesnt seem to be any way to make it work with battlefield 2. Stoping firefox from working again was the last straw for me. Maybe ill try the next version.

[NeilTaggert]

First time I tried with srvany.exe it locked up.

But I realised the trick, and now it works and jetico now runs as a service. I will need more testing to see if there are any bugs. But at least one problem solved.

Now if only there is a way to autoupdate md5 hashes...

[Kerodo]

Can you say what the trick was?

[Neiltaggert]

Cool, make it two 'tricks'. Second one isn't strictly necessary, but makes thing easier and more secure.

[Kerodo]

And they are?

[A nony mouse]

-{ Quote: "As much as I liked it, it is still giving me lots of trouble. And there doesnt seem to be any way to make it work with battlefield 2. Stoping firefox from working again was the last straw for me. Maybe ill try the next version." }-
I 've noticed quite a few of these in their latest ver. (1.0.0.61)
-{ Quote: " 29. v. 1.0.1.61 Freeware, 19th July, 2005.
Occasional problem of unloading firewall user interface module at shutdown time in Windows NT 4.0 is fixed. " }-
Seems whatever they fixed for windows NT has broken the app detection. You could try the previous version (1.0.0.60) which still keeps working flawlessly for me.

Need some info on how to run it properly as a service so if someone could post some info how they got it to work properly.
Re: Auto updating md5 hashes
What I use for these is a workaround by creating a set of rules without any app selected like ones set up for webbrowser and when i change the app I just select it to handle as that set and delete the old one. Its no autoupdate but saves you from recreating all the rules every time.

[AJohn]

Just an update on Jetico PF:

-{ Quote: "Thank you for choosing our software. At the moment we are developing JPF v2.
I hope that the new version will be more flexible than current one. In other hand,
we did not forget user interface usability.
We have both IDS and MAC address filtering in our v2 plan...." }-

[Kerodo]

Wow, sounds interesting.. If they can tame it a little it might be really cool...

[AJohn]

Definately, i'm currently using JPF and am Very happy with it. I had a lot of problems with previous versions, but the current build runs smoothly on my PC. Although the rule-making is unique, it is simple once you get used to it. With an IDS and MAC address filtering this firewall will be awesome. I can't help but wonder how affective it's statefull abilities are though?

[dukebluedevil]

Yeah JPF2 should be pretty nice so long as they take there time developing it and don't rush it at all, which it seems like there doing which is good. Been using JPF1 ever since I saw it posted here at the beggining of the year and have been loving it since.

I emailed them a few months back on some things and here were there reply.

> - Improved Stateful Inspection - with timeout values,
> which the user can adjust either in the registry or a
> file (similar to CHX-I packet filter)
- Planned, but not implemented yet

> - MAC address filtering
- Planned, easy to implement

> - Hash updates for new programs
- Planned.

> - Protocol shown under the Applications tab

> - IP address range & port lists per rule
- Implemented: IP address ranges lists, port ranges lists,
protocols lists, events lists, etc.

> - Option to turn off non-traffic logs (i.e. Policy
> "Optimal Protection" loaded, Firewall Shutdown
> Completed, ect.)
- Logging system is rewritten from scratch. Message filtering
by log level is planned.

> - Improved rule editor window without the tree
> structure and that is larger by default so that its
> easier and faster to create rules.
- Implemented.

[AJohn]

Sounds awesome :D Out of all the firewalls I have used I am currently using Jetico. While it is not perfect, I find it far better than many.

[Kerodo]

Duke, great suggestions.. I look forward to seeing version 2 for sure. I always did like Jetico pretty much, it seemed very good. The only thing that annoyed me was the quantity of popups you had to go thru to get the rules set up and get things under control. But once you get it set up, it's really a good firewall.

[dukebluedevil]

Kerodo - Yes there are alot of popups especially at first. I think the most annoying part of Jetico that causes alot of popups is the "access to network" for applications. Untill that gets improved some more you can get rid of the popups for that by creating a rule either in the Application, Ask User, or System Applications tables - verdict: accept, protocol: any, event: access to network.


JPF is only one of a few advanced firewalls I would even consider running. Its not bloated, its packet filtering abilities are quite good, it is very configurable, and it shows alot of detailed information in its logs. Also the support is very good too.

[Kerodo]

I am looking forward to seeing version 2, but one thing I hope they manage to fix is the situation where it gets into an infinite reboot loop when it encounters certain conflicting software/drivers. One example it had trouble with during install was if you were running Avast AV. It rebooted, then needed to relocate it's drivers or something due to a conflict with Avast, so it rebooted again, but some people found that this reboot was an infinite loop, rebooting over and over, in effect hosing your system, since as soon as you broke out of the loop manually, there was crap left half installed and hanging, messing your system up pretty good. I heard several people say they had the problem on various systems, and I myself encountered it once and had to reformat to clean up. This is one thing they need to make sure is fixed for good in v2. Oddly enough, I had this problem when Avast was installed first, however, another user had Avast installed and had no such problem. So there is more there than meets the eye. Needs looking into at any rate..

[Ryan1F]

i suggest that you use another firewall :lurking:
the one that simple to use but also provide strong security..:-\

[Clweb]

-{ Quote: "I am looking forward to seeing version 2, but one thing I hope they manage to fix is the situation where it gets into an infinite reboot loop when it encounters certain conflicting software/drivers. One example it had trouble with during install was if you were running Avast AV. It rebooted, then needed to relocate it's drivers or something due to a conflict with Avast, so it rebooted again, but some people found that this reboot was an infinite loop, rebooting over and over, in effect hosing your system, since as soon as you broke out of the loop manually, there was crap left half installed and hanging, messing your system up pretty good. " }-

I have Avast too here and running Jetico without problem. Maybe because I have only the standard shield from Avast active. I think Web or Net shields are of no much use when a firewall is also running.

[A nony mouse]

A little update for people having problems with jetico denying apps without checking.
There seems ot be a problem with windows XP with versions 1.0.1.61, 1.0.1.60 where without checkin or detecting if an app is trying to connect it automatucally gets rejected. where as 1.0.1.60 works ok for windows 2000, and 1.0.1.61 seems broken. From what I 've tested 1.0.1.59 works fine with XP for me so maybe thats the go until JPFv2.

[A nony mouse]

Got 1.0.1.60 to work with XP but Adobe Acrobat speed launcher interferes, After disabling that it seems to work fine.

[khazars]

version 1.0.1.61 works fine for me on XpSp2!

[Clweb]

Here also !
:D