eqsecure outbound warning

[docfleetwood]

I have decided to try eqsecure as my new hips. I have downloaded 3.41 and imported the latest of Alcyon's ruleset. I am pretty sure I did it correctly. My question is...

Is it possible for eqsecure to give a warning when a program attempts to outbound connect to the internet? I run Windows firewall and would like something that offers outbound connection monitoring like Ghost Security's Appdefend does. EQSecure may do this and I am just missing a setting/rule. Can anyone offer some help?

Thanks!

[docfleetwood]

Also, does eqsecure warn if an executable has been modified? For example, if I update a program and start the newer version, should eqs tell me the program has changed via some sort of checksum? Because my settings don't seem to be doing that so I wanted to know if this was possible also.

[arran]

Bump.

I also use eqs

Like would like to know this as well, come all you eqs experts. easter, alycon can some one make a posty.

[Muchinga]

-{ Quote: "
Is it possible for eqsecure to give a warning when a program attempts to outbound connect to the internet? I run Windows firewall and would like something that offers outbound connection monitoring like Ghost Security's Appdefend does. EQSecure may do this and I am just missing a setting/rule. Can anyone offer some help?

Thanks!" }-

No network protection.

-{ Quote: "
Also, does eqsecure warn if an executable has been modified? For example, if I update a program and start the newer version, should eqs tell me the program has changed via some sort of checksum? Because my settings don't seem to be doing that so I wanted to know if this was possible also.
" }-

Applications Rules > Others settings > Verify program file with MD5 ;) : http://i40.tinypic.com/2je5kpj.jpg

[docfleetwood]

Thanks Muchinga

That is unfortunate that it can't prompt for something to use the internet/network - I really like that feature in Appdefend.

Regarding the 'verify with md5' - I see how to do it with each individual application - Do you know if there is a way to make that the default behavior as new programs are added to the list?

[subset]

-{ Quote: "
Regarding the 'verify with md5' - I see how to do it with each individual application - Do you know if there is a way to make that the default behavior as new programs are added to the list?" }-
I didn't find a way to make this md5 check default within the program.
But you can edit your XML rule files with e.g. notepad.
Just find MD5Check="0" and replace with MD5Check="1".

Cheers

[arran]

This is what I like about Kerio 2.15 firewall it is very light and it also checks
MD5 Signature which is what you want.

[Alcyon]

Hi docfleetwood.

Sorry for the delay, my gpu fan almost died so i was unable to reply... Everything is now back to normal.

EQSecure can protect only against some types of firewall leaks. You can verify with Matousec's leaktests (dnstest, awft, etc.). For the rest, EQSecure isn't a firewall so what you're asking isn't possible. The best advice i can give you is to flush the lame Windows firewall and use something more decent like Look'n'Stop if you want something Extremely light.