tiny firewall 6.5.126 passes all the leak tests

[bogota]

Hi im just trying tiny firewall and very impressed, just did not only passed all the leak tests, it also pased the avaliable tests of:

http://kareldjag.over-blog.com/article-232553.html

if configured correctly.

you can get reg control, system privileges, dll load, parent child spawn appl, ole/com control, ids & ips, nat/ics, services protection etc......

im very very impressed

what do you think about this firewall?

[Coitus_is_good]

I think it's a m*o*n*s*t*e*r !!
Tiny is a living proof that a dream_came_true isn't always what it looked like. Perfect for paranoid who is also mazochist!
Someone who uses all it's functions - doesn't have self-confidence (probably his knowledge is poor).
If it's nothing of above - than aperson is just curious, very curious, and beeing curious is healthy! ;)
Dr.Oetker :D

[TraCKs]

Thats great, ZA Pro also passes all those tests since there new apdate, 2 months ago... :)

[bogota]

Hi

"Tiny is a living proof that a dream_came_true isn't always what it looked like. Perfect for paranoid who is also mazochist!"

paranoid... perhaps, but mazochist i dont think so, tiny could be configured to ask just the necesary, is it possible to crate groups that includes the conditions required for each aplication or aplication groups like office, browsers, antivirus, windows services, group etc. out of the box offers good protection but its better
to do a personal config, its very boring, but once you have done, you dont have to worry any more.

each new appl launched invokes a window that offers a lot of options like: run without security context, run on the context security, run like instalation software, run in track and reverse mode (very good idea), dont run or is possible to asign the corresponding group

Please i would like to hear more users of tiny here

Regards

[Chuck57]

All I can say is that anyone who uses Tiny firewall is a lot braver than me. I have an older version, 4.x and ended up locking myself out of my computer. Absolutely nothing would work. I ended up having to reformat in order to fix the problem.

It proved to me that Tiny does work, and that I'm not knowlegeable enough to use it.

[bogota]

But.. the last version is easy to use by deffault, out of the box offers good protection and its forum is very helpfull, takes a lot of time to tweak but i love it

[brjoon1021]

They do not have a free version as far as I can tell. Do they?

[yahoo]

-{ Quote: "But.. the last version is easy to use by deffault, out of the box offers good protection and its forum is very helpfull, takes a lot of time to tweak but i love it" }-

I am using TINY too, and I like it. As experienced users, we tend to think TINY is easy and gradually forget the difficulties that we encountered long time ago as a new user. TINY 6.5 may be good enough for experienced users, but I have to admit that it could still be a challenge to new users. It is not merely caused by the software itself, but also related to the user's knowledge about registry, processes, DLL's, net protocols, and so on. If a user lacks the fundamental knowledge about these stuffs, TINY would always be tough as rule making in TINY needs some of such fundamental knowledge.

I do not think that I am paranoid at all. However, I do think it's not a bad idea to have more lines of defence if you are capable of building them:)

[khazars]

what's Tiny free version like, is it any good?

And, is tiny like kerio 2.1.5 version or different?

I'm using Jetico and the momnet and am happy with it!

[Chuck57]

I had Tiny free years ago, on a Win98 machine and loved it. It was the first firewall I ever used. I used it for a while on a new computer with XP. When SP2 came along, the Tiny firewall wouldn't work on my computer, so I had to change.

Tiny 2.xx free can still be found if you do a search. It's a good firewall, but might not work if you have XP SP2. Kerio 2.1.5 is almost identical and from what I've read here is still a good firewall with the right rule set.

I use Kerio 4.2, free and love it. The new Tiny firewall....I need a lot more firewall experience than I have before I'd feel confident in trying it.

[khazars]

thx Chuck for the reply!

So, the new Tiny is not like the old Tiny and Kerio? I have used Kerio 2.1.5 and liked it a lot, but switched to Jetico and CHX-I.

[se7engreen]

-{ Quote: "So, the new Tiny is not like the old Tiny and Kerio? I have used Kerio 2.1.5 and liked it a lot, but switched to Jetico and CHX-I." }-

I hope I'm not butting in, but I thought I'd add that the latest Tiny is drastically different than the older free version. The latest Tiny is more than just a firewall, it is also a comprehensive application, file, and registry sandbox with the ability to track and reverse changes made by unknown apps (hence the name track 'n' reverse). I would guess that if you are comfortable with Jetico, you'd be able to learn Tiny FW.

[khazars]

cheers seven! Has anyone got a link to download the free version of Tiny, I tried their link but it's a FTP link and it just hangs using IE and Mozilla ?

[se7engreen]

http://www.321download.com/LastFreeware/page3.html

Here's a link to download version 2.0.9, scroll part way down. Hope it's the version you're looking for.

[tuatara]

-{ Quote: "I am using TINY too, and I like it. As experienced users, we tend to think TINY is easy and gradually forget the difficulties that we encountered long time ago as a new user. TINY 6.5 may be good enough for experienced users, but I have to admit that it could still be a challenge to new users." }-

I agree totally, the latest version is much simpler to use then the previous versions.

Further more i think Tiny personal Firewall 2005 Pro is the best
security software there is for your Windows XP system.

But it seems that we are shouting in the dessert.

Everybody keeps refering to the older versions (which were very difficult to use).

*) But ..Tiny Personal Firewall has the same features as Process Guard
built in AND a lot more!

see this:
http://www.tinysoftware.com/home/tiny2?s=5375286922908122544A3&&pg=content05&an=tf_comparison&cat=cat_tf6

Btw..
On Jun 28 Computer Associates International, Inc. announced the acquisition of Tiny Software.

I am using Tiny for a very long time, and until now have never seen
something like it.

The only thing that i think is VERY wrong with this product is it's name
it is NOT a firewall it is A COMPLETE Windows Security/Protection Suite.

Tiny's host (endpoint) security engine provides the total protection of the computer resources including:

Network Interface(s)
Files and Folders
Registry
Applications start
Applications behavior
Devices
... and other system components

Here is the list of the most attractive features from the network security standpoint:



stateful packet filtering
prevents unknown processes from stealing your data to the internet
prevents unknown processes from misusing your trusted applications
selective filtering of endpoint and pass-through traffic
selective filtering of the network traffic per interfaces
selective filtering of a network traffic coming to an interface with multiple IP addresses
interfaces divided into zones
full support for terminal services - rules per process per user
time restrictions on network traffic
integration with Active Directory for gateway deployment
fully XML compliant policies
... and many more

Windows Security

The Windows Security engine protects the computer resources against unwanted and suspicious accesses and changes. The Windows Security engine allows you to set your own list of trusted application and their access rights to the system. The Windows Security engine isolates the applications minimizing their impact on system resources.

The most attractive features include:



code injection prevention prevents malicious processes to misuse trusted applications
process spawning control prevents malicious processes from starting other applications
complete file protection preventing unwanted changes to your file system
complete registry protection preventing unwanted changes to your registry
system service installation control preventing trojans installing themselves as a system service
device protection preventing misusing of USB devices, COM ports, modems, and other devices
complete Dll loading control allows to specify which dlls may be loaded by which applications - no more undetectable trojans
... and many more
etc. etc. etc.

[se7engreen]

On top of all that you just posted, there is also very little impact on system resources. In that regard the name Tiny is very accurate.

[tuatara]

yes, it is expensive but it replaces a lot of other tools and still
has more features.

Antimalware is my work and hobby,
and i have licenses for almost every product there is out there.
But this is a product i am using meself when the system must be safe.

[theshadow247]

-{ Quote: "On top of all that you just posted, there is also very little impact on system resources. In that regard the name Tiny is very accurate." }-i have been going between filseclab and tiny firewall.but the more i use tiny the more i like it.it is a lot easyer than older versions.-{ Quote: "yes, it is expensive but it replaces a lot of other tools and still
has more features." }-.i have never felt as safe with a firewall.as with tiny. ;D

[bogota]

I have to say that there is some things you would do before using the firewall, ilike download the snort rules to the ids, download the latest driver to Physical memory device protection, download the dll to make work the back up
utility, its simple an all those archives could be obtained at forum page :

http://www.tinysoftware.com/forum/forumdisplay.php?

you must be registered there, then can find all about tiny. :)

regards

[cinrg]

>> it is NOT a firewall it is A COMPLETE Windows Security/Protection Suite.
Are you sure? And what about AntiVirus (and AntiSpam)?
And many of your friends will be able to work with TF? But what about huge type of non-experienced users...
And price of this cake (TF pro) is 99$.. Very high.

[chew]

Hmmm ... recently I have been looking at Firewall like Look 'n' Stop and Outpost ... but I have almost forgotten Tiny until now.

So my questions: (couldn't find this info on Tiny's site)

1) Is it a One time payment i.e. no annual renewal fees?

2) Does it work with multiple profile i.e. limited user?

Cheers

:)

[tuatara]

-{ Quote: ">> it is NOT a firewall it is A COMPLETE Windows Security/Protection Suite.
Are you sure? And what about AntiVirus (and AntiSpam)?
And many of your friends will be able to work with TF? But what about huge type of non-experienced users...
And price of this cake (TF pro) is 99$.. Very high." }-

AntiVirus: It sure protects your VERY UNSAFE Windows XP Os
against a lot of things that a virus would do.
But it is not a Virusscanner.

AntiSpam: I've started with E-mail via UUCP, later on i used SMTP and POP.
Years later POP3 and again years later IMAP.
And after YEARS of using IMAP the prices of webmail were so low, that
i started to use webmail.
Spam is filtered on the server via lots of AntiSpam tools.

I know that there are still people who are using outlook which is by far
the most unsafe email-client there is out there.

But the best way to handle Spam is on the mailserver.
If you can't do that and your ISP can't.
Switch to a email Provider or use a tool like MailWasher Pro
that removes spam from your ISP's mailserver BEFORE it enters your pc.

So i never get SPAM on my computers (clients).

And ok, and also Tiny doesn't give you the XP security updates you need.

What i meant was that it protects Files,Registry,Network Ports,OS,Memory
devices , processes etc. etc.

And yes it is expensive, it is EASY to use (i am not saying this about the previous versions) and if you want your pc protected just as good with other tools, you pay more.

And .. if you look at my other posts you'll see that i am not always
positive about software we discuss here.

But i have tested a lot of Software firewalls over the last years,
and have never seen one that was better. (even more simple: yes)

[se7engreen]

$99 is not that much for the functionality that you get. Here's a common combination that I've seen at Wilders: Process Guard $29.95 + RegDefend $29.95 + Outpost $39.95 = $99.85 and you still don't have all of the functionality of Tiny. Not to mention that too many kernel level apps can possibly leave your system unstable.

[bogota]

totally agree :)

[cinrg]

Ok,
>> and you still don't have all of the functionality of Tiny
Tiny is not a panacea. Without AV it's possible to defeat Tiny in not so complex way.
I think that KIS 2006 will be a more (maybe not much more, but more) suitable choice for total protection. And cheaper. Am I wrong? Could you provide link to some comparison?

[tuatara]

-{ Quote: "Without AV it's possible to defeat Tiny in not so complex way." }-

Example ?

[tuatara]

I don't think you must compare those two
they are totally different.
It is just like a ship and a car, they can both transport you
but they are very different.

I would not say that you don't need a AntiVirus with Tiny,
it would certainly protect your pc in many ways, but it
does not detect a virus as a virus.
So before you trust an application it is wise to run it thru a virusscan
i prefer NOD32 and Kaspersky and Sophos.

And it is always a matter of price-versus-fun

you can add an extra lock on your front door or you can
replace the door with a Fort-Knox vault-door.


I use Tiny Personal Firewall 2005 Pro in combination with NOD32
and KAV2006 Beta (one for on-demand only) and i use ShadowUser
and backup my system with Acronis True Image to another disk daily

This computer is used for test-purposes, since testing software
is part of my job.

Never had problems with it. And found thousands of malware ..

[cinrg]

>> Example ?
Ok, we'll provide an example in 1-2 weeks.

>> it would certainly protect your pc in many ways, but it
does not detect a virus as a virus.
But If KIS is (or will) able to protect me in ALL the ways - in which Tiny can - and also give me AV-defence then I choose KIS with no questions.

So my question is about what Tiny can what KIS can't? Main my points:
Statefull Firewall +
Dll injection +
RegMonitor + (stronger than in Tiny)
Run browser with cmd + (simple and dde and other way)
Proactive intrusion detection + (very cool)
AutoRecovery + (=rollback)
AntiRootkit + (Tiny?)
AntiVirus + (strongest I think)
AntiSpam + (big number of methods)
AntiSpy subsystems
...

[lawmaker]

kis‘s regmonitor is stronger than tiny？！
kis’s process guard is stronger than tiny？！

[Edwin024]

I can't really imagine that that is a fact. Tiny is a leader on the firewall front while Kaspersky is on the AV front. But the other things of Kaspersky, besides the AV, are quite mediocre so far.

[se7engreen]

I'm not arguing that one is better than the other; I do think the two products in question fill two different niches in the security market. KIS is effective, easy to use security all the way around. TF is not about detection; it's about analysis and prevention for knowledgeable users.
I'm curious how you came to this conclusion though.
-{ Quote: "RegMonitor + (stronger than in Tiny)" }-

[mlr1m]

-{ Quote: "Hmmm ... recently I have been looking at Firewall like Look 'n' Stop and Outpost ... but I have almost forgotten Tiny until now.

So my questions: (couldn't find this info on Tiny's site)

1) Is it a One time payment i.e. no annual renewal fees?

2) Does it work with multiple profile i.e. limited user?

Cheers

:)" }-
It is a one time payment.

I have the pro version and it works great with limited users, this is one of the reasons i like it.

Michael

[Siro]

Good firewall but very hard to configure thats what i had to go through :D

[Edwin024]

I find that Tiny has great protection out of the box already. I did not configure that much either.

[pj320]

yeah very hard to configure. Messed my system once. Too bad i had to reformat my pc.

[tuatara]

-{ Quote: "I find that Tiny has great protection out of the box already. I did not configure that much either.
" }-

True, i remember the old versions, those were difficult, but it was clever
that the changed that.

It can't be more simple then it is today.

;)

[mlr1m]

Although Tiny is getting easier, it is still possible to make your system anable to start.
There is a fix for this in the Tiny manual. I forget exactly where it is.
Find this section in the manual, print it out and keep it in a safe place.
It will save you from having to reformat.

Michael

[Paranoid2000]

-{ Quote: "...all those archives could be obtained at forum page :

http://www.tinysoftware.com/forum/forumdisplay.php?

you must be registered there, then can find all about tiny. :) " }-The fact that you have to register there before even being able to view the forums makes it a complete no-go for me. When you already have several forum logins to manage, you only create new accounts when absolutely necessary and this is the one reason why I've never bothered looking at Tiny.

As for comparing KAV/KIS 2006 with Tiny - yes, Kaspersky do have a strong security suite but it is prone to conflict (like BSODs with Process Guard) and is "pre-beta" so it would be fairer to wait until the final version is released.

[Paranoid2000]

Another strike against their forum is that the admin address bounces. Guess they don't consider it a priority... :o

[tuatara]

To be honest, i don't think that the quality of the forum
is compareable with their products

With other words, i am not impressed by that forum,
but i still like their products.

[Diver]

To: bogota, and the rest of you that understand Tiny. You are all invited to join Mensa.

The real problem is locking down the system to the point that some numskull who can't resist the latest free game/babe-in-swimsuit screen saver/celebrity tool bar/ will not mess the system up. That means the security system must be set up to require no user interaction. If you are smart enough to master Tiny, you are smart enough to avoid all of the problems in the first place.

It is completely amazing how much security you can get with a minimalist setup (AV + Router) with a barely computer literate user if you just explain to them what to do: always click no.

[The Seeker]

-{ Quote: "http://www.321download.com/LastFreeware/page3.html

Here's a link to download version 2.0.9, scroll part way down. Hope it's the version you're looking for." }-

I've just downloaded this version of Tiny and was thinking of trying it out.

I used to use Kerio 2.1.5 but after discovering its inability to block fragmented packets I stopped using (sadly).

I'm aware that Kerio stemmed from Tiny so would I be right in assuming that this older version of Tiny is susceptible to fragmented packets just as Kerio 2.1.5 is?

[Kerodo]

I'm not sure anyone knows for a fact, but I think it's a good bet that it does suffer from the same frag problem. I'd move on to something new if you're really worried about it.

[The Seeker]

-{ Quote: "I'm not sure anyone knows for a fact, but I think it's a good bet that it does suffer from the same frag problem. I'd move on to something new if you're really worried about it." }-

Yeah I did some Googling and couldn't find a definitive answer.

I am worried so it's probably best not to install it as you say. I'd be constantly thinking about it and would no doubt uninstall it after a while.

I notice that ZoneAlarm have updated their firewall products today, I think I'll give the free version a shot.

Thanks for responding Kerodo :)