Best logging format

Discussion in 'other firewalls' started by Tinribs, Apr 25, 2003.

Thread Status:
Not open for further replies.
  1. Tinribs

    Tinribs Registered Member

    Joined:
    Mar 14, 2002
    Posts:
    734
    Location:
    England
    Just interested what firewall people think has the most 'informative' logging system.

    I currently use sygate and its good, but the logs often leave a bit to be desired,especially after a logged port scan.
    What I did remember though from previous ZA useage is the logging and alerting of every sneeze and cough worldwide, is there a firewall thats recommeneded for its sensible ogging?

    Over the months and years I have tried (in different releases)
    Sygate (current version)
    Sygate Pro(current v)
    ZAF
    ZAP (current v)
    Black Ice PC Protection 3.6 (current V)
    Kerio 2.14
    Kerio 3 beta 6

    Help...
     
  2. the Tester

    the Tester Registered Member

    Joined:
    Jul 28, 2002
    Posts:
    2,854
    Location:
    The Gateway to the Blue Hills,WI.
    Tinribs.

    I like the logging feature in LooknStop.

    I have tried:
    Zone Alarm
    Sygate
    Kerio 2.1.4
    Kerio 3b6
    (I never tried any of the Pro verions of ZA or Sygate,so I don't know what their logs look like)

    LnS provides a lot of detail IMO.
    There are screenshots,including the log at this link:
    http://www.looknstop.com/En/firewall.htm
     
  3. solarpowered candle

    solarpowered candle Registered Member

    Joined:
    Jan 9, 2003
    Posts:
    1,181
    Location:
    new zealand
    Yea look n stop is a very tidy firewall.
     
  4. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi guys!

    I have to say the above mentioned is correct. Look'n'Stop has a very nice logging feature. Especially all logs are saved day by day on your computer. So you don't loose control of it.

    I was using these firewalls:

    Zone Alarm Pro
    Norton Internet Security 2002 (what a crap!) :mad:
    Look'n'Stop

    Since then I'm using Look'n'Stop and I don't think I will change that fast, because I'm more than happy with it! :D

    Regards,

    Patrice
     
  5. Ph33r_

    Ph33r_ Guest

    If you in Reference specifically to “Log to file”; Look ‘n’ Stop contains numerous Features regarding this,

    In Addition to that Feature;

    Who would figure an Additional “Raw Log” Feature to the Standard text logging, especially since I see quite so more Informatics giving with Look ‘n’ Stop’s Standard logging to file compared to most Software Firewall’s Logs…

    The only dislike I have in regards to Look ‘n’ Stop Logging Feature is that only that which gets logged to file is that which has “Warning Flag” set which Displays packets in “Log” screen, the only current way it’ll capture to Log File… And hopefully soon we’ll see few Additions like Rule doesn’t need a “Warning Flag” set to be capable of Logging to file…
    [/quote][/quote]
     
  6. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Ph33r!

    Nice to meet you again!
    Funny, but that's exactly what I like! ;) For example in Application filtering, I don't want that every single application which tries to connect to the internet is logged. Just some, so that I don't loose the overall view. It's the same for the Internet filtering. Less is more, as you certainly know.

    And what's the matter with the Warning Flag? Just set for every Application and Internet rule a flag, then everything will be logged and you don't have to care about it again.

    Best regards!

    Patrice

    P.S. Ph33r why don't you register here, your statements are more than welcome! You already spend a lot of time in here... ;)
     
  7. Tinribs

    Tinribs Registered Member

    Joined:
    Mar 14, 2002
    Posts:
    734
    Location:
    England
    Thanks guys, I guess I'll give Look n stop a whirl for a bit, I did mean to give it a look anyway. :)
     
  8. Ph33r_

    Ph33r_ Guest

    Hey Patrice

    In Reference to Internet Filtering Layer; There is a such thing as blissful Loggings which I personally consider anything malicious, and stressful Loggings which belongs to an Authorized Service which I’d prefer to be-capable of logging to file but without needing to set “Warning Flag” just to-do the work of “Logging to file”…

    I have reasons, besides my main goal is Look ‘n’ Stop and since I assist by hostering Look ‘n’ Stop Personal Firewall Forum on Spyblocker I don’t really need to hang elsewhere constantly, and since it’s not a constant thing here why Register? ;)
     
  9. MickeyTheMan

    MickeyTheMan Security Expert

    Joined:
    Feb 9, 2002
    Posts:
    1,016
    Another thing to remember is that unless your firewall has antiflood enabled which LNS has, logging can in itself be a source of system crash.
    Perrsonally, i'm content that LNS effectively blocks and have deactived logging for many rules.
     
  10. Ph33r_

    Ph33r_ Guest

    Yes that’s true Software Firewalls can crash due to Massive Loggings; however if the Software Firewall crashes due to Massive Loggings then I’d say either there’s something seriously wrong with your System or that particular product. Because a stable Firewall can withstand as Powerful Massive Attacks without any Safe/Anti Logging Features Enabled…

    Look ‘n’ Stop can handle anything you can throw at it without Safe/Anti Logging Features Enabled depending on ones System if it’s poorly maintained… I’ve linked couple of Hi Boxes and set it to Packet me silly 80/100 Packets per Second being Logged to “Log” screen and Logged to file…

    Look ‘n’ Stop absorbing it like nothing, no Errors/Crashes/Freezes/Delays of any kind… And these tests I performed was running for hours Non-Stop without any Look ‘n’ Stop problems…
     
  11. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Ph33r_ or Phant0m!
    Mhh... There's another forum of Look'n'Stop? Is it an official one or not? Funny, I never heard about it yet.

    Regards,

    Patrice
     
  12. Ph33r_

    Ph33r_ Guest

    Frederic and I had been Moderating the Official Forum on Becky’s Board until it went down and then Paul SB offered me spot on his Spyblocker Board to hoster Look ‘n’ Stop Forum, near the same time Paul Wilders offered position on his/this Board to Frederic…

    So then it was too late for me to turn down something I already gotten, so I choose to make SB Board my Home…

    Anyways, I’d poster u an url to-it but it’ll probably just be slapped with Advertising or something and removed… ;)
     
  13. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Ph33r_

    No problem, I have already found it! ;) You don't need to put the link here... Just give me one word and I'll find it! :D

    It happened to me as well that a link I provided was censored. :'(

    Regards,

    Patrice
     
  14. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    Phantom,

    I honestly think you know us better.
    We don´t care where any user of any software gets help, when he needs it. As long as he gets it.
    We appreciate you helping out here when you can. Highly appreciated.

    Regards,

    Pieter
     
  15. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hi Phantom,

    First and foremost: you are most welcome over here - and your fine LnS support is highly appreciated!

    To all: As ever, our adagium has been we are glad and happy in providing space for top notch security software - and LnS is beyond any doubt. There's a condition coming with it though: in order to avoid confusion, we want the software support forum the only official one, as is the case for amongst others the LnS forum over on this board.

    regards.

    paul
     
  16. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Paul!

    Just a little question (don't hang me for this!): And DCS? Don't they have a second forum at their site? Is this the unofficial one over there? lol

    Sorry, but I don't think they call it unofficial...

    O.K., I shut up now!! :blink:

    Best regards!

    Patrice
     
  17. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    Hang you?? What for? ;). As for DCS: the one and only official Open TDS/WormGuard/Port Explorer forums are hosted over here - always have been. The private forums for these DCS apps have been hosted over on their site - for years in a row in the meanwhile, open for those who actually did buy the software.

    I do hope not! The distinction as described above (Open vs Private) is a result of decision making from both DCS and us. Both of us are quite happy with it ;)

    Grin...you can't - I'll bet 30 Greek Drachmes on that one :cool:

    regards.

    paul
     
  18. Ph33r_

    Ph33r_ Guest

    I Appreciate that guys, I’ve been here from time to time to assist Frederic tad bit which allows him more free time to be-capable of handling user’s Issues, Questions, and comments E-mails and to Implement new Features and maybe few minutes play-time outside the box with a girl friend or two…

    Whether I’m here or elsewhere if someone needs Assistances I don’t mind giving, there’s no competitiveness just because we our both living on different tracks… Me here, you there or you here and me there… where-ever we presently at and assistance is required, Assistances shall be giving. And that’s what’s important… :D
     
  19. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,312
    Location:
    Netherlands
    :D Trying to get rid of some small change, before it´s too late? :D
     
  20. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    You are doing a fine job, no doubt about that ;)

    Amen to that!

    regards,

    paul
     
  21. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
     
  22. Patrice

    Patrice Registered Member

    Joined:
    Apr 15, 2003
    Posts:
    571
    Location:
    Antarctica
    Hi Paul,
    You got me! You're right, rather I die than to shut up! :D O.K. where do I have to pay the 30 Greek Drachmes? LOL :D

    Greetings!

    Patrice
     
  23. Paul Wilders

    Paul Wilders Administrator

    Joined:
    Jul 1, 2001
    Posts:
    12,472
    Location:
    The Netherlands
    At last! I'll drop you an email as soon as I've opened a new bank account for this :cool:

    regards,

    paul
     
Thread Status:
Not open for further replies.