PrivateFirewall V7.0.28.1 Released Today

[biscuits]

Originally Posted by EASTER

3 Cheers for PFW!

Waiting with baited breath for Privacyware to hopefully release an even more improved "free" version of this extremely useful and beneficial work.

EASTER

It could be because of my router as well as I repeated the tests without using any firewall installed in my PC and passed it.

[DVD+R]

I think I must have set a New olympic record with this, 3 seconds to install and 1 to uninstall! That the amount of time I had this piece of crap!.... Installed it1 rebooted, and that was it! the whole system froze stone cold with just a blank GUI on my desktop, and some French looking dude holding a stop sign in my taskbar. I had to reset the system to get back, and it froze again, luckily I had my Acronis boot disc handy. Never again will I go near this thing

[DBone]

Gold medal winner!

[paniccom]

Originally Posted by DVD+R

I think I must have set a New olympic record with this, 3 seconds to install and 1 to uninstall! That the amount of time I had this piece of crap!.... Installed it1 rebooted, and that was it! the whole system froze stone cold with just a blank GUI on my desktop, and some French looking dude holding a stop sign in my taskbar. I had to reset the system to get back, and it froze again, luckily I had my Acronis boot disc handy. Never again will I go near this thing

I thought I was crazy--so many people on this site praise this pgm, but I also had weird effects right after installing. Glad I also use Acronis disc for b/u.

[vojta]

Originally Posted by paniccom

I thought I was crazy--so many people on this site praise this pgm, but I also had weird effects right after installing. Glad I also use Acronis disc for b/u.

It's perfectly compatible that many people have only good things to say about a program and some others experience serious issues with it. For example, I could never get Avast to run in my system and I really don't know way. I searched their forum and no one seemed to suffer the same problem.

I didn't login there to say that Avast was crap, of course. That would have been absolutely moronic behaviour.

[Blues7]

Originally Posted by vojta

It's perfectly compatible that many people have only good things to say about a program and some others experience serious issues with it. For example, I could never get Avast to run in my system and I really don't know way. I searched their forum and no one seemed to suffer the same problem.

I didn't login there to say that Avast was crap, of course. That would have been absolutely moronic behaviour.

Thanks for restoring (at least for the moment) my faith in humanity.

[gdiloren]

Originally Posted by itman

--- Correction ---


Yes it is an Avast issue and the Avast forum is where you should be getting help from.

Here is how to prevent all non-Avast web shield filtered traffic on port 80 for your browser.

In your existing PF browser firewall rules:

You need to disable your existing browser PF Primary and Alternate HTTP Connections rules by by unchecking the H and L boxes.

Leave all your remaining browser rules as is; that includes the existing Secure HTTP Connection rule that connects to port 443! In the event you uninstall Avast or turn off its web shield, you will have to activate Primary and Alternate HTTP Connections rules and delete or deactivate the new rules you will add below.

You need to create 2 firewall rules for you browser to only allow HTTP traffic to Avast web shield proxy server:

Allow outbound - TCP - from local 1024-65355(user) port - to remote port 12080, remote IP 127.0.0.1 - checkmark IP address connection box only.

Deny Outbound -TCP - from any local port- to remote port 80, any remote IP - checkmark H and L boxes.

Move the two new rules to the top of the existing rule set.

That's it!

If these rules look weird remember that its avastsvc.exe that is doing the actual HTTP connections with Avast web shield turned on, not your browser.

Having problem with this tip as the old rules which I deactivate H and L keeps reactivating it to allow and puts themselves on TOP of them all. What to do

[paniccom]

Originally Posted by vojta

It's perfectly compatible that many people have only good things to say about a program and some others experience serious issues with it. For example, I could never get Avast to run in my system and I really don't know way. I searched their forum and no one seemed to suffer the same problem.

I didn't login there to say that Avast was crap, of course. That would have been absolutely moronic behaviour.

I agree. And I never said it was crap, just that I felt like I was the only one having problems with the software, although I'm sure others may have, and yes, it is likely a system to system difference since no one has the exact same pgms, settings, and all the other junk that can affect software. I installed it on three separate occasions and had to uninstall it each time due to problems and reimaged my HDD, although an uninstall would probably have sufficed. But you're correct, and I should not have posted anything negative here. My humble apologies, all.

[Jim1cor13]

In my opinion, PF is one of the best. Under 4MB installer and can run with the big boys with no problems, in fact, it performs better than most of the bloated offerings like ZA, etc. Some folks know the fellow that handles PF at Privacy ware and stated he is a real champ and his work speaks for itself, both by quality and very well written code.

Like anything though, it can cause problems. I used to just use the win7 firewall which was fine for me. I remembered PF one day and decided to try it. It locked up the whole system due to my laptop synaptics touchpad...LOL I could not move my mouse to hit "allow" and had to shutdown and reimage.

Then next time I tried it, I was ready for it and used the tab key until i could navigate and click "allow" LOL other than that, it is a quality offering.

[Jim1cor13]

Originally Posted by paniccom

I thought I was crazy--so many people on this site praise this pgm, but I also had weird effects right after installing. Glad I also use Acronis disc for b/u.

No you are not crazy my friend.

Sometimes these programs just do not work properly for some. Like I said above, PF freaked out over my synaptics touchpad mouse...i was helpless until i figured out how to deal with that blunder. otherwise, it is a great firewall, but it sure can cause problems like any other piece of software.

Sometimes the very software we think we need can become a real adversary LOL

[hogndog]

Major Geeks likes it.. its Geek-o-licious myself i like it just fine with one exception that guy holding the stop sign needs a new uniform..

http://www.majorgeeks.com/Privatefirewall_d1730.html

Privatefirewall is an integrated desktop firewall and multi-layer intrusion prevention software delivers signature-less, zero-hour protection from known or new spyware, viruses, hacking techniques and other intrusions on Windows desktops and servers.

Privatefirewall is comprised of several distinct protection layers including desktop firewall, port manager, URL filtering, process monitor, and application/system behavior modeling and anomaly detection components. Privatefirewall 5.0 evaluates WinAPI calls and analyzes a comprehensive list of system variables and security-sensitive registry keys and alerts administrators to possible malware, attack, or policy violations.

Privatefirewall layered approach to PC and enterprise endpoint defense addresses the Windows vulnerabilities that hackers exploit to gain unauthorized system access and cause damage to private systems and data.

Privatefirewall models and monitors system behavior to identify and block activity characteristic of known malware, hacking, phishing and other threat types so that personal computer users and IT managers within small, medium or large organizations can more effectively and proactively protect the environments and private data for which they are responsible.

Internet and network security settings, untrusted web sites and IPs, and the manner in which software applications and related processes can access the Internet can be easily configured via Privatefirewall intuitive management console.

Features:

Proactive, Multi-Layered Defense:

Advanced packet filtering – Proprietary stateful packet inspection technology monitors all communication between the PC and the Internet and detects and blocks all unauthorized traffic. Privatefirewall allows the simple adjustment of security levels (High/Low/Custom) to establish different degrees of security for Internet and Local Network access.

Ultimate Application Control – Highly configurable Application Control Console enables you to specify which and precisely how applications can access the Internet.

Process Detection - Prevents viruses, trojans, worms and other malware by tracking all trusted processes and providing alerts when any potentially malicious process attempts to run.

System Anomaly Detection – System Anomaly Detection Engine baselines normal usage based on system variables such as CPU utilization, thread count, and others. Normal use patterns of running applications are monitored and alerts are generated as unusual activity is detected.

Intelligent Tray Alerts – Compact, user-friendly tray alerts provide detailed information regarding security events, offer native web search for convenient investigation, and pre-set intelligent “time-out” responses.

Stealth Mode – PC is invisible when online and stealth to potential intruders.

Port Tracking and Reporting – All ports are monitored to prohibit unauthorized scanning and system intrusion. Detailed reports are generated on all port scan and other reconnaissance attempts in addition to instantaneous on-screen alerts.

Email Anomaly Detection – Privatefirewall mitigates the impact of attacks targeting email clients by tracking the volume and frequency of outbound emails. Privatefirewall alerts you and blocks unacceptable deviations from normal email activity.

Application Control and Firewall Policy Management:

Monitor all traffic to and from your PC and prevent trusted applications from being “Hi-Jacked” to steal local or network-accessible files.

The Process Monitor adds an important layer of defense to conventional firewall protection by identifying process-level behavior characteristics of intrusion techniques and malware activity.

Control which applications can access the Internet, and whether to permit/block every application with each usage or make permissions permanent. Specific IPs and/or Websites can be blocked or allowed access.

Define application specific or global packet filtering rules that can be applied to incoming, outgoing or bi-directional traffic.

View or create advanced firewall reports sorted by Web, Mail, or System access attempts spanning Hours, Days, Weeks, or customized time periods.

Unmatched Ease of Use:

Privatefirewall’s security presets deliver superior PC protection immediately upon installation. Setup and configuration are fully automatic right out of the box.

One-click configuration of pre-defined security settings for Home, Office, and Remote profiles eliminate complicated application tuning.

Privatefirewall conveniently detects connections to local networks and automatically sets rules that allow access within that network.

A variety of custom configuration interfaces are easily accessible for advanced users.

Privatefirewall is fully integrated with Windows Security Center.

Hogndog

[itman]

Having problem with this tip as the old rules which I deactivate H and L keeps reactivating it to allow and puts themselves on TOP of them all. What to do

Oops! My deepest apologies. I screwed up. Below are the correct rules:

First verify avastsvc.exe is set to Allow(green) in PF Advanced Application settings; check for avastsvc.exe in both Parents and Processes tabs.

I would also change the Limited setting for avastsvc.exe in PF's Process Monitor to Allow. This will prevent PF from interfering with avastsvc.exe processing.

Next you need to create 2 firewall rules for avastsvc.exe to only allow HTTP traffic from Avast web shield proxy server:

Allow outbound - TCP - from local 1024-65355(user) port - to remote port 12080, remote IP 127.0.0.1 - checkmark IP address connection box only. This rule must be first.

Allow Outbound -TCP - from any local port- to remote port 80, any remote IP - checkmark H and L boxes. This rule must be below the above rule.

Then for the existing HTTP(tcp port 80, 8080, etc.) PF rule for your browser, change from Allow to Deny.

Finally if for some reason you disable or uninstall Avast and you wish to connect to the Internet, you will need to reset the HTTP browser rule you set Deny back to Allow.

The PF rules I show above for Avast web shield are just optional settings to beef up security. By default, most firewalls will not block TCP port 80 for whatever browser is in use. So anything that triggers the browser and many applications do, can directly connect via TCP port 80 bypassing Avast's web shield.

Comment: According to the PF developer, PF does not monitor localhost activity i.e. IP addresses 127.0.0.0 - 127.255.255.255. So technically speaking, the first rule I gave for avastsvc.exe is unnecessary. It is required for firewalls that do monitor localhost such as Comodo.

What I suspect the primary culprit is the default rule PF generated for avastsvc.exe. This is probably: Allow outbound - TCP - from local 1024-65355(user) ports - to remote port and IP any.

In PF "speak", from local 1024-65355(user) port means from your DHCP assigned IP address for your PC e.g. 192.168.1.1. Avastsvc.exe however will use its proxy server located on 127.0.0.1 as the local IP source. So the second rule I gave for avastsvc.exe should allow it to connect since it specifies a local port/IP address of "any."

[joter]

... BTW how can I add a system rule to allow INBOUND and OUTBOUND for other protocols like 50 and 51.
I need this for the VPN connectivity.

Regards

joter

[itman]

... BTW how can I add a system rule to allow INBOUND and OUTBOUND for other protocols like 50 and 51. I need this for the VPN connectivity.

If I recollect, PF generates default rules for VPN. If those don't surfice, you can check within them on how protocol is specified. I believe you have an option to specify protocol by number which is what your after.

[joter]

Originally Posted by itman

If I recollect, PF generates default rules for VPN. If those don't surfice, you can check within them on how protocol is specified. I believe you have an option to specify protocol by number which is what your after.

There are no VPN rules as I can see. And I also thought I can edit protocol number, like existing rules with protocol 47 and 41, but I can not find the way.

Regards
joter

[itman]

There are no VPN rules as I can see. And I also thought I can edit protocol number, like existing rules with protocol 47 and 41, but I can not find the way.

You have a recent version of PF installed?

In Add/Edit Rule , select the Generic IP packets opinion. If protocol not specified by number, then it should be by name. Protocol 50 = ESP and 51 = AH.

ref: http://en.wikipedia.org/wiki/List_of...otocol_numbers

[joter]

Originally Posted by itman

You have a recent version of PF installed?

In Add/Edit Rule , select the Generic IP packets opinion.

I have the PF v.7.0.28.1.
Maybe it's a bug but I can not select the Generic IP packets opinion. Only TCP /UDP packets. Anyone there with same version to test this?

Regards
joter

[itman]

Can you Edit an existing VPN rule; access Generic Packets that way? I also suspect default VPN rules are under the Office profile.

Hum ..... Wonder if PF restricts VPN to the Office Profie? Switch to that and see if it contains what you are looking for. Bottom line - you might have to use the Office profile for VPN connections and switch back to the Home profile for normal surfing. Also check the Remote profile - this might the one to use since with VPN you are bypassing the remote connection firewall?

Fill out a support ticket for this at the Privacyware web site. Greg will get back to you within 24 hours max.

[itman]

Here's how to do VPN in WIN 7 assuming you are using the WIN 7 firewall. If not using WIN 7 firewall, your third party firewall must have equivalent rules.

http://www.ghacks.net/2011/08/17/how...-on-windows-7/

Notice the ref in the article to port 1723? I know a default rule for that port exists in the PF Home profile. It might be named PTP, Peer To Peer, etc.

[paniccom]

Originally Posted by hogndog

Major Geeks likes it.. its Geek-o-licious myself i like it just fine with one exception that guy holding the stop sign needs a new uniform..

http://www.majorgeeks.com/Privatefirewall_d1730.html

Privatefirewall is an integrated desktop firewall and multi-layer intrusion prevention software delivers signature-less, zero-hour protection from known or new spyware, viruses, hacking techniques and other intrusions on Windows desktops and servers.

Privatefirewall is comprised of several distinct protection layers including desktop firewall, port manager, URL filtering, process monitor, and etc., etc........Hogndog

Wow! Now I feel like trying it again. I'm wondering if my HDD image may have been one I took after I originally had and then uninstalled MS Essentials(?) AV on it. Maybe it left some junk behind that affected my PF install. I could always go wa-a-a-y back to my first HDD image that had nothing but WINXP SP3 and nothing else...if all works fine, I could then add all my pgms on top of PF install.

[ratchet]

Originally Posted by DVD+R

I think I must have set a New olympic record with this, 3 seconds to install and 1 to uninstall! That the amount of time I had this piece of crap!.... Installed it1 rebooted, and that was it! the whole system froze stone cold with just a blank GUI on my desktop, and some French looking dude holding a stop sign in my taskbar. I had to reset the system to get back, and it froze again, luckily I had my Acronis boot disc handy. Never again will I go near this thing

It nuked my 64 bit W7 too. Although I had disabled Home and Public networks in the W7 Fw, apparently also had to disable the service. I also had to restore my system. To gun shy to try again even with the service disabled!

[AMIGA500]

Originally Posted by DVD+R

I think I must have set a New olympic record with this, 3 seconds to install and 1 to uninstall! That the amount of time I had this piece of crap!.... Installed it1 rebooted, and that was it! the whole system froze stone cold with just a blank GUI on my desktop, and some French looking dude holding a stop sign in my taskbar. I had to reset the system to get back, and it froze again, luckily I had my Acronis boot disc handy. Never again will I go near this thing

i had a similar problem with private firewall.i tried to install a couple of times and my computer froze and locked up solid and thus i had to perform my one and only hard reset with the power button.
I wouldnt say PFW is crap though its just it didnt run nice on my system.its practically impossible to test software on every system.
some work and some dont and sadly PFW did not work for me but im sure it works for many just fine.

[mattbiernat]

Wow, a lot of people in here are having trouble with PFW. i had the same problem. I installed it on my W7 64bit and it froze my system right the way. I restored my HD from an image and on a fresh install with only MBAM and HMP, I've installed PWF and everything went fine. So the problem obviously is some previous installations or other programs that interfere with PFW. In itself PFW looks great so far, little memory usage (as opposed to OA) and not very intrusive. I hope those programs that people are having are gonna get worked out in the next update.

[mattbiernat]

Anybody knows if Private FW protects the MBR as well?

[itman]

Anybody knows if Private FW protects the MBR as well?

Not that I am aware of.

PF HIPS would protect you by alerting you of unknown malicious processes attempting that type of activity.

I don't know of any third party firewall or the WIN 7 firewall that directly mointor MBR access.

Malicious MBR mods. occur when a rootkit installs itself in free space on a drive. There the rootkit can operate unseen by OS processes. The favorite tactic being to create a hidden partition.