PDA

View Full Version : Problem with Sunbelt Personal Firewall


prozabor
November 11th, 2007, 11:35 AM
I have reinstall Windows XP. I decided to install Sunbelt Personal Firewall. But I have empty log now. Computer was online few hours. Is it normal or my SPF is not protecting me? All security settings are good. Maybe I am too worried:)

timcan
November 11th, 2007, 01:41 PM
Hi, in the app rules window I believe you have to enable logging to each application that want logged.

Kerodo
November 11th, 2007, 01:57 PM
You should be seeing something in the logs, especially after a few hours. Silly question perhaps, but do you have a router? If so, that would render the logs pretty much empty as far as inbound goes....

prozabor
November 11th, 2007, 02:05 PM
I checked "Enable advanced logging (to unopened ports)" and I have only blocked traffic on unopen ports. Maybe because I closed few system services (ports).

I think now it is good.

Take a look at sreenshoot.

Kerodo
November 11th, 2007, 02:41 PM
Yes, you are quite right, I had forgotten about the option for logging to unopened ports. That will do it. Now you will see any inbound hitting you in the logs. :)

Steven Avery
November 13th, 2007, 09:25 AM
Hi Folks,

Excellent forums, newbie poster here, long-time reader.

I am on Kerio 4.3 with 4.5 free being upgraded on next boot.
(Also considering the $9.95 purchase special which I just discovered !)

And I have tried to activate all logging.

Yet on Overview/Statistics ..
The numbers are all 0, even though I have never done a reset.

And where is
"Enable advanced logging (to unopened ports)"
that is mentioned above ? Perhaps the newer version.

Also I recently got an outgoing alert that I wanted to understand, the IP number was 67.15.196.39, Everyone's Internet in Houston. (Which firewalls combine WhoIs with their alerts ? It would be very helpful.) Possibly this site relates to Avast. However I wanted to go back and see what was the process (my concern was that it looked like a randomized name and I didn't write it down and save the name) and the port, if it tells me. I can't find a log for this anywhere.

Oh, is the main Sunbelt-Kerio-dedicated webforum the one at Castlecops ?

I sort of like the program, it has run well for a long time, have a router as well, and agree that usability and sensibility are important features in a firewall. (I have also used Zone Alarm and now have Online Armor on a second puter.)

While researching for this post I stumbled into their Application controls, implemented them and have gotten some very good proper messages (eg Windows Auto Update and Avast update). I find that Kerio and Ghost (AppDefend and RegDefend) and Avast! seem to work fine with one another.

Any help appreciated :) .

Shalom,
Steven Avery
Queens, NY

prozabor
November 13th, 2007, 01:52 PM
-{ Quote: "
And where is
"Enable advanced logging (to unopened ports)"
that is mentioned above ? Perhaps the newer version.
" }-

This is in Network Security---> Advanced.

Do you have blocked traffic to open ports? I have only for unopened.

Steven Avery
November 13th, 2007, 05:42 PM
-{ Quote: "This is in Network Security---> Advanced. Do you have blocked traffic to open ports? I have only for unopened." }- Hi Prozabor,

Ok, thanks for the advanced logging. (Which is in an unusual spot, not with the other logging.) That is one question answered. I'll keep my eyes on the strange statistics.

I think I need also to know which setting is this "block traffic" "open ports" one, too.

Shalom,
Steven