List of Free Firewalls

[AJohn]

Free Windows Firewalls:
-------------------------------

1. CHX-I Packet Filter and/or NAT:

   http://www.idrci.net/packetfilter/html/index.html

2. Outpost Personal Firewall Free:

   http://www.agnitum.com/download/outpost1.html

3. Sygate Personal Firewall Standard:

   http://smb.sygate.com/products/spf_standard.htm

4. Secure Point Firewall and/or VPN Client:

   http://www.securepoint.cc/en/products-pcfirewall.html

5. Soft Perfect Personal Firewall:

   http://www.softperfect.com/products/firewall/

6. Kerio Personal Firewall Free:

   http://www.kerio.com/kpf_download.html

   -Kerio 2.1.5 DL:

   http://www.kerio.com/dwn/kpf2-en-win.exe

7. ZoneAlarm Free:

   http://www.zonelabs.com/store/conten...ku_list_za.jsp

8. Firewall 2004:

   http://www.wyvernworks.com/firewall.html

9. Filseclab Personal Firewall:

   http://www.filseclab.com/eng/products/firewall.htm

10. Jetico Personal Firewall Beta:

    http://www.jetico.com/jpfirewall.htm

11. Look 'n' Stop Lite (turns into lite after trial is up/no app filtering):

    http://www.looknstop.com/En/index2.htm

12. Primedius Personal Firewall Lite:

    http://www.primedius.com/PersonalFirewall.htm

13. Sphinx A-Wall:

    http://www.sphinx-soft.com/firewall/programs.html

14. SafeZone Free:

    http://www.minutegroup.com/prodpg_safezone.htm

15. Enigma Firewall:

    http://www.enigmasoftwaregroup.com/products.shtml

16. Xeon Personal Firewall:

    http://www.econceptsoftware.com/xeon.html

17. BartWare Personal Firewall:

    http://www.bartware.com/index.php?action=download

18. GoldTach Free:

    http://www.goldtach.com/download.htm#GoldTach16

19. AirSnare:

    http://home.comcast.net/~jay.deboer/airsnare/

20. FireLogXP:

    http://www.2brightsparks.com/freeware/freeware-hub.html

21. Firewall Builder:

    http://www.fwbuilder.org/

22. FirePanel XP:

    http://www.router19.org/

23. Proxy+:

    http://www.proxyplus.cz/

    Microsoft's 90 day/1 year trials:

    http://www.microsoft.com/athome/secu.../firewall.aspx

24. -CA EZ Armor:

    http://www.my-etrust.com/microsoft/

25. -Symantec:

    http://www.symantecstore.com/dr/v2/e...674&cache_id=0

26. -Panda:

    http://www.pandasoftware.com/microsoft/english.htm

27. -McAfee:

    http://us.mcafee.com/root/landingpag..._mpfp&cid=8437

28. -F-Secure:

    http://www.f-secure.com/protectyourpc/

    
    Network Intrusion Detection:
    
    
29. -Pure Secure:

    http://www.demarc.com/products/puresecure/personal/

30. -SecurePoint IDS Nuzzler:

    http://www.securepoint.cc/en/products-ids.html

31. -Prevx Home:

    http://www.prevx.com/prevxhome.asp

32. -Snort:

    http://www.snort.org/

    -Snort-Wireless:

    http://snort-wireless.org/

    -SnortCenter:

    http://users.pandora.be/larc/

    -Guardian:

    http://www.chaotic.org/guardian/

    -IDScenter:

    http://www.engagesecurity.com/products/idscenter/

    -EagleX:

    http://www.engagesecurity.com/products/eaglex/

    -SnortSam:

    http://www.snortsam.net/

    -Honeynet Security Console:

    http://www.activeworx.org/programs/hsc/index.htm

    -IDS Policy Manager:

    http://www.activeworx.org/programs/idspm/index.htm

    -ACID - XML:

    http://www.maximumunix.org/

    -Securimine for Snort:

    http://www.securimine.com/product.html

    -Barnyard:

    http://www.winsnort.com/modules.php?...ownload&sid=11

    -Basic Analysis and Security Engine:

    http://www.winsnort.com/modules.php?...ownload&sid=19

33. -SnoopNetCop Standard:

    http://www.snoopanalyzer.com/snoopne...tandard_01.asp

34. -Fport:

    https://www.foundstone.com/resources/proddesc/fport.htm

35. -Attacker:

    https://www.foundstone.com/resources...c/attacker.htm

36. -AntiScanner:

    http://www.status3.i-r.co.uk/antiscanner.htm

37. -PortsLock:

    http://www.protect-me.com/pl/

38. -Emsa Port Blocker:

    http://www.e-systems.ro/port_blocker.htm

39. -Internet Cop:

    http://net.supereva.it/essebisoft/intcopen.htm

40. -Trap Server:

    http://www.security-corporation.com/trapserver.html

41. -Cassandra:

    https://cassandra.cerias.purdue.edu/main/index.html

42. -PortBlocker:

    http://www.analogx.com/contents/down...ork/pblock.htm

43. -MyBlockeR:

    http://members.fortunecity.com/myeraser/_preview.htm

    
    Host Intrusion Detection:
    
    
44. -Filewatch:

    https://www.foundstone.com/resources.../filewatch.htm

45. -GFI LANguard System Integrity Monitor:

    http://www.gfi.com/lansim/

46. -GFI WebMonitor for ISA Server - Freeware version:

    http://www.gfi.com/webmon/webmonfreeware.htm

47. -GFI LANguard Security Event Log Monitor - Freeware version:

    http://www.gfi.com/lanselm/lanselmfreeware.htm

48. -GFI Network Server Monitor - Freeware version:

    http://www.gfi.com/nsm/nsmfreeware.htm

49. -OSIRIS:

    http://osiris.shmoo.com/

50. -Snare:

    http://www.intersectalliance.com/pro...gNT/index.html

51. -FTimes:

    http://ftimes.sourceforge.net/FTimes/index.shtml

52. -WinInterrogate:

    http://winfingerprint.sourceforge.ne...nterrogate.php

53. -Jacksum:

    http://www.jonelo.de/java/jacksum/

54. -System Safety Monitor:

    http://maxcomputing.narod.ru/ssme.html?lang=en

55. -Watch Dog:

    http://www.korben.tk/

-------------------------------

*I do not necessarily recommend any of these*
List will be updated as I am aware of more.
Why would I use a firewall?
Which one is the best?

[Unity]

I didn't know that there were so many free firewalls , thx for the list

[Jimbob1989]

Wow... thats a decent list, however i pay for my Firewall anyway.

Jimbob

[dukebluedevil]

Great list AJohn!

The only thing I would suggest adding is a link to Kerio 2.1.5 http://www.kerio.com/dwn/kpf2-en-win.exe , which you won't find on Kerio's site since they are now pushing there newer 4.x version. Alot of people out there still use and like Kerio 2.1.5 though since it is very configurable and simple and uses little resources. Kerio 4.x is buggy and bloated. It would be great if you listed the two versions for people.

Thanks!

[AJohn]

Originally Posted by dukebluedevil

Great list AJohn!

The only thing I would suggest adding is a link to Kerio 2.1.5...

Done, thanks

[se7engreen]

Very nice list!
Although I do believe that FirePanel XP is shareware.

[bellgamin]

Great list!!! Domo arigato de gozaimashita

[c0ltran3]

Thanks for this list

[gerardwil]

Bell I understand your Japanese but do the others?

Gerardo

[AJohn]

FirePanel XP is ATM freeware (for their testing purposes I assume).
This is the same for Jetico and maybe others.
When their status changes they will be removed from the list.
Thanks though.

Any more additions?
Im sure I missed dozens, just not able to find them

[Weber]

Now we need someone to test them all

I've been thinking about replacing my kerio 2.15 but never found a good substitute...

[AJohn]

I have tested probably 90% of them. Some are really not worth it, but for some people they may be. Out of the ones I have tested I have to say for packet filtering CHX-I is the best hands down. It is missing a application filter though. I choose to use CHX-I packet filter with LnS application filter. It is the best combination I know of, but isn't a free solution.

Secure Point, Sygate free and Filseclab are awesome firewalls for costing 0$

Also, you could always use any of Microsoft's extended trials for above average protection. If one runs up (90 days/1 year) simply install another one or format.

As far as I know McAfee is the only one that requires you to mail anything in.

GL

[Kerodo]

AJohn, is CHX-I hard to figure out? Does it come with a predefined set of rules or something, similar to 8Signs? I was thinking of trying it, but I wasn't sure what I would be getting into. I do like rule based firewalls and the lack of app filtering isn't a problem for me...

[GlobalForce]

Another fine post for Wilder's Security Forums.......very nice AJohn.
I personally appreciate your informative assistance and input for the benefit of all.

Thanks,
GF

[AJohn]

When I first decided to give it a try it seemed confusing, but it is somewhat simular to 8Signs in a lot of ways. It allows for IP and Port groups and the rulemaking is rather simular. It isn't as easy to setup and doesn't allow automatic rule making or a learning mode. It can be complicated and there are many ways to go about using it, but it allows for much more control than 8Signs does.

The best places I know of to learn about CHX-I Packet Filter are:

The online documentation: http://www.idrci.net/packetfilter/html/index.html

and

The CHX-I thread over at the Software Security Central forums: http://www.fluxgfx.com/ssc/forumdisplay.php?f=23

Keep in mind that for you to continue using CHX-I after 30 days in a personal environment you must e-mail them and ask for a serial. They have great support even for non-commercial users and will probbly reply way before your 30 days are up.

[Kerodo]

Ok, thanks for the links and info AJohn.. I did Register before downloading and I got a serial number in an email from them, so that's no problem. I think I'll read up on it and then maybe give it a try. Thanks again...

[AJohn]

Added some IDS tools and switched the layout a bit.
Comments are welcome and anything I missed will be added as soon as someone lets me know

I know Japanese!
Domo arigato Mister Roboto.

This thread deserves a sticky.

[Kerodo]

This CHX-I is one great piece of software.. Installed it yesterday and after some reading and research, got things set up nicely here. I highly recommend it. Better than most.. Thanks to AJohn for listing it here and recommending it...

[AJohn]

Originally Posted by Kerodo

This CHX-I is one great piece of software.. Installed it yesterday and after some reading and research, got things set up nicely here. I highly recommend it. Better than most.. Thanks to AJohn for listing it here and recommending it...

I'm glad you like it I just recently began using it myself

It is the most complete packet filter I have ever seen and it is FREE!

A lot of people have been trying to get them to implement some applicaiton control, but they are very hesitant due to the fact that it wouldn't be reliable (lots of reasons for that). I have asked them about the ability to log packets per process and they seem to be giving it some thought, although I don't know how much. There dev. team is more interactive than any I know of and I cannot begin to imagine how great the support is for commercial users who pay for it. Phant0m`` has requested the ability to turn off rules when the application they apply to isn't running and they seem to be seriously considering implementing that feature, which currently only exists in Conseal and Look 'n' Stop.

I'm curious to see how CHX-I will develop in the next months/years.

[synapse]

i dont know if this is allowed on the boards but, i have Zone Alarm Security Suite and its cracked and that seems to be really really good, just as good as outpost and tiny

[NAMOR]

i dont know if this is allowed on the boards but, i have Zone Alarm Security Suite and its cracked and that seems to be really really good, just as good as outpost and tiny

How about just saying I use zonealarm Security Suite, it's great. I have experienced zero problems with it, give it a try.

[CrazyM]

Originally Posted by synapse

i dont know if this is allowed on the boards but, i have Zone Alarm Security Suite and its cracked and that seems to be really really good, just as good as outpost and tiny

And just what kind of security do you think you have running cracked software?

Regards,

CrazyM

[Detox]

I should think you would realize at the very least that cracked software is very illegal - so you surely wouldn't want to advertise the fact if nothing else

[Kec Velaskec]

I'm sure that real protection is worth paying.

i dont know if this is allowed on the boards but, i have Zone Alarm Security Suite and its cracked and that seems to be really really good, just as good as outpost and tiny

There's nothing bad that someone tries to crack a commercial personal firewall . Try crack pcInternet Patrol - you will not succeed. Because it is a real protection.

---
http://www.pcinternetpatrol.com/foru...?showtopic=175