Windows Firewall Question

Is there any way to make Windows Firewall block outbound connections? I'm just a resource usage freak when it comes to my PC. And I would like a way to have secure 2-way connection without even noticing its there.

 

Only in Vista

 

kerio 2.1.5

 

Install a HIPS like Prosecurity to take care of outward bound,which is pretty quiet,after training

It performs well in leaktests.

 

Can you expand on that a bit? I had ProSecurity installed for a couple of weeks, and liked it very much. But it is HIPS, not a "firewall". Are you saying that the control PS affords over the hidden execution of programs is what you mean by "outbound protection"??


|||

 

Rather than installing another firewall-a HIPS like Prosecurity or SSM would work in unison with WF .

PS of course attempts to prevent trojans, keyloggers, rootkits and other malwares from installing in the first place.

Very good leaktests results

However, have just tried APT to terminate PS and PS failed!

 

I just installed Prosecurity and so far it looks promising. I didn't see where it would block outbound connection attempts until I went more indepth in the options for applications. Then u can block incoming and outgoing on tcp. So do i still need to use Windows Firewall with Prosecurity? Or is Prosecurity sufficient enough?

 

Definitely run both unless you are behind a router.

As mentioned,PS can be shut down by ATP,which means its vulnerable to termination attacks.

Try it yourself and see how you go

Read about it here

http://www.diamondcs.com.au/advancedseries/apt.php

.Edit-shutting down PS by APT doesnt affect its protection!

 

ThreatFire can be config'd to act as a firewall, using custom rules from post 5-7 shown here. TF using 7-8MB/ram (with custom rules) for me.