Geswall Questions

Discussion in 'other anti-malware software' started by Murderlove, Sep 15, 2008.

Thread Status:
Not open for further replies.
  1. Murderlove

    Murderlove Registered Member

    Joined:
    Jul 18, 2008
    Posts:
    99
    Hello everyone,

    I have looked here if this question about usb-sticks was asked before, but could not find such information. I am currently trying out Geswall 2.7.1 Professional. I have applied the following rules with success:
    -deny internet access of all applications:
    https://www.wilderssecurity.com/showthread.php?t=214682&page=2
    -rules from Aigle(thank you very much):
    https://www.wilderssecurity.com/showthread.php?t=180489
    (see picture)

    1) Is possible to actually put usb-drives/sticks as a Threat Gate.
    2) Do you have other tips for rules that I could try out?

    Thanks in advance.
     

    Attached Files:

    • Ges.JPG
      Ges.JPG
      File size:
      122.8 KB
      Views:
      8
  2. Henk1956

    Henk1956 Registered Member

    Joined:
    Dec 3, 2007
    Posts:
    55
  3. Murderlove

    Murderlove Registered Member

    Joined:
    Jul 18, 2008
    Posts:
    99
    Thank you for your reply Henk1956. I have applied the settings you gave there, but it did not work.

    Is there perhaps another program that will automatically put usb-sticks/drives in an untrusted/sandboxed environment uppon connecting to my computer?

    Thanks in advance.
     
  4. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Yep, is second option of screen below
     

    Attached Files:

    • usb.JPG
      usb.JPG
      File size:
      39.2 KB
      Views:
      419
  5. Murderlove

    Murderlove Registered Member

    Joined:
    Jul 18, 2008
    Posts:
    99
    Kees1958,

    Thank you very much. Luckily I already had a license for Defensewall, but I was so busy trying out other software that I did not payed attention to Defensewall. I actually thought that "Automatically run applications from removable sources as untrusted" was meant for CD/DVD drives only :doubt:

    Sometimes good programs are right under your nose...;) I guess this will end my trial with Geswall for now. I really look forward to the new implementations to the program by Ilya.:D

    Cheers!
     
  6. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    CD/DVD, USB, external HDDs (with the version higher that 2.45).
     
  7. Murderlove

    Murderlove Registered Member

    Joined:
    Jul 18, 2008
    Posts:
    99
    Hey Ilya Rabinovich,

    Yes I have version 2.45 installed. And it is running my usb sticks as untrusted. I look forward to run external HDD's as untrusted as well.

    Cheers!
     
  8. Cerxes

    Cerxes Registered Member

    Joined:
    Sep 6, 2005
    Posts:
    581
    Location:
    Northern Europe
    Well, not me, since I´m using an external USB HDD daily, and therefore it would be nice if one could exclude the HDD from being non-trusted. I prefer it the way it is now, where only the USB sticks are automagically non-trusted.

    /C.
     
  9. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    You can always set up untrusted excludes the way you need it.
     
  10. hammerman

    hammerman Registered Member

    Joined:
    Jul 14, 2007
    Posts:
    283
    Location:
    UK
    I checked DW Properties for all my Removable drives and CD/DVD drive and they were all Untrusted. I switched on my external USB HDD M: and it came up as Trusted. Is this correct? The Type for M: is Local Disk. Using V2.45
     

    Attached Files:

    Last edited: Sep 20, 2008
  11. Murderlove

    Murderlove Registered Member

    Joined:
    Jul 18, 2008
    Posts:
    99
    Hey hammerman,

    I have checked it as well with an external HDD. It is also trusted. My USB-Sticks and CD/DVD drive however are not. So from what I understood is that external HDD's will also be Untrusted with versions higher than 2.45. But with the current version(2.45) external HDD's are not.
     
Loading...
Thread Status:
Not open for further replies.