geswall free how do i isolate my dvd drive/usb drive

Discussion in 'other anti-malware software' started by wutsup, Oct 29, 2009.

Thread Status:
Not open for further replies.
  1. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    can geswall free isolate your dvdrom/usb drives? i tried it by adding a new resource but it doesnt seem to work. does it only work in the pro version?
     
  2. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Posted at geswall forums by Henk
     
  3. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    already tried this and it doesnt work
     
  4. dell boy

    dell boy Registered Member

    Joined:
    Apr 13, 2009
    Posts:
    240
    Location:
    uk, england
    different threat gates are different on different computers, for example: my dvd drive on this vista laptop is marked as (E) however on my old XP pro desktop (E) was a usb drive, theyre all different, it seems geswall is complicated if you have the free version and you arent a rocket scientist :doubt:
     
  5. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    yes ived tried just putting in E:\(my dvd drive) as aigle has said in another thread but it doesnt work when i put in a cd with .jpg pictures and when i open a picture there is no G sign on the upper right had corner like it should.
     
  6. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States

    hmm ic never tried any other cd or usb, but ill try and report back
     
  7. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    just inserted an avira rescue cd and had a .txt file in there and when i opened it, it wasnt isolated
     
  8. arjunned

    arjunned Registered Member

    Joined:
    Apr 1, 2008
    Posts:
    191
    I think i started a thread a while back, posting/asking the same question. The quote that Kees provided is actually how to isolate the usb drives, but some how doesn't work with 2.9. I've tried as much as i can, but it doesn't isolate automtically. For instance, when i isolate, say, my X:\, the usb inserted does get isolted. But when i unplug and plug it back in GeSWall doesnt isolate the same usb. But manually inserting the resource rule gain via GeSWall console isolates the drive. I'm not a 100% on why its not working. A glitch in 2.9 maybe.

    Isolating Removable drives with GeSWall?
     
    Last edited: Oct 29, 2009
  9. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    Feature is broken.

    https://www.wilderssecurity.com/showthread.php?t=249960
     
  10. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
  11. arjunned

    arjunned Registered Member

    Joined:
    Apr 1, 2008
    Posts:
    191
    The CD/DVD isolation resource rule used to work for me in 2.8, but not in 2.9.
     
  12. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    let me check and i wil reply. What's your OS?
     
  13. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    windows xp 32bit (my secondary computer)

    my main computer is vista 64bit so i will have to wait for geswall free 3.0 if i want it on my main comp
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    OK, on XP SP2, CD/ DVD isolation seems to work.

    To configure CD/DVD as a source of untrusted files follow this steps:
    Open GeSWall Console and click on 'Resouces' folder.
    Click right mouse button and select 'New\Add Resource..'
    In the dialog:
    Set 'Security Class' to 'Threat Gates'
    Set 'Resource Type' to 'File'
    Set Identity by 'Name'
    Type \Device\CdRom in 'Resource' edit box.
    Press OK button( Sometimes you need to reboot here or just stop and restart geswall service).
    Now if you start an application from CD or DVD it must be isolated.

    How to confirm: Run an executable from CD and you will see it isolated.

    http://www.gentlesecurity.com/docs/geswallfaq07.html#q4
     

    Attached Files:

    • gg.png
      gg.png
      File size:
      9.2 KB
      Views:
      423
  15. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    Pictures are opened by explorer that is trusted in geswall, so it,s not isolated. Workaround is to use another image viewer. I use portable XnView that,s very light. So is IrfanView.
    Isolated txt files, jpg and other images etc are not isolated unless the program which is opening them like notepad, XnView etc is added to the isolated application list in the geswall console. It,s a version 2.9 bug actually that needs to be corrected.
     
  16. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    ok thx but i thought u said the \Device\CdRom doesnt work for 2.9 and adding resources should work for geswall free versoin right?
     
  17. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    For CD Rom it will work. Doesn,t work for USB sticks etc.
     
  18. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    ah ic but its a dvd drive. should i type DvdRom instead of CdRom? and it works for geswall free right? not just pro
     
  19. arjunned

    arjunned Registered Member

    Joined:
    Apr 1, 2008
    Posts:
    191
    Just CdRom should be fine. It works on free as well. I dont think the free version has any restrictions in creating custom resource rules.
     
  20. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,164
    Location:
    UK / Pakistan
    Yes, that must be true.
     
  21. wutsup

    wutsup Registered Member

    Joined:
    Sep 20, 2009
    Posts:
    634
    Location:
    United States
    hey aigle do you know when geswall free will be out for 64bit? im dying to have some kind of intrustion prevetion protection on my 64bit OS comp.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.