How to properly set up Geswall

Ok, I have had numerous PMs of late from folks wanting to use this program but are hesitant on how to set it up. As with all programs, there is a easy way, and the involved, very secure way. I use the easy out of the box way.

After installing, when I open IE7, Vista Mail and Media player, a box pops up asking if you want to add them to Geswalls protection, which, duh, ya do.

After that, nadda, I dont do anything. My web browsing, email are all protected from the dreaded, "Malicious Process".

This method works. Is it the best setup? Duh no, but look at who is posting this, the Avatar Man.

So my dear friends, the real purpose of this thread is to start getting those of you, who use the paid version, to offer advice into your settings, so that we all may benefit. Well, that and so people will quit sending me PMs.

 

Hi,
I'm looking forward to this thread.

 

I no nothing about partitions. Aigle, jump in anytime here and a couple of you, behind the scences users. Ya know who you are.

 

I'm not one of them, just stopped to say big

LMAO

to this thread.

Cheers,

 

Guys,

haha I got you, I will remove my post, was just teasing, the only solution is buying another policy sandbox with nearlly the same name

TIP: change the name of this thread from improperly to properly (your are asking to get your leg pulled this way)

Cheers Kees

 

I found that I had to start creating rules in order for certain things to work right. At first I was taken aback by the process, but reviewing the logs proved to be the key. Basically, I just looked at the log before the action in question and then immediately after, and usually I could find the info I needed right there in order to add a rule.

 

U moved the file urself. If so, mark it untrusted again at the same time.
If file is moved by malware, it will not be marked trusted anyway.

 

GW does not know malware, so it can not know when moved by malware.

 

I know this topic is about Geswall, but Defensewall seems to do the same thing. If I copy an untrusted file, the copy becomes trusted. Does this mean if I copy malware.exe from one location to another and then run it, it now runs trusted?

 

What is your version of DefenseWall? Total untrusted files copy control is from 2.30 version.

 

ahem, Geswall thread here.

 

What a good idea is with GeSWall is to define your documents, mail directory and Windows Address Book as confidential

AND

A) allow you e-mail application to access your mail directory and WAB (e.g Outlook Express)
B) allow uour webbrowser access to your download directory only (e.g. IE, FF or Opera)
C) allow your shared directory only to your P2P application (eg LimeWire)
D) allow your media player to music and movie directory (e.g. WMPlayer)

In this way you strengthen the policy management with access limitation to personal folders with a specific allow policy for specific untrusted aps to specific folders (sort of SRP-light)

@Trjam, noticed the change in the header RE: how to properly setup . . .

 

done

 

Now I am proud on yeh!

 

In a way it knows. If moved by malware( untrusted), file will remian untrusted.
Whe u move via explorer( exploer being always trusted), the file tagging is gone. Malware is not allowed to tamper trusted explorer.exe as well.

So all in all it,s OK though I agree that retaining the tags might be better.

 

settled than

 

I have a question.How can I islolate email with out the right click in all programs.

 

when your email program firsts opens, you are giving the option to have it enclosed in Geswall. Or click the tray icon then applications and your email program and right click to isolate it.

 

when I first opened window mail there was no option or pop up.If I right click on icon on desk top the option is there but it does not open.It only opens from All Programs.

 

How to set up Custom Rules in GesWall?, see here:

https://www.wilderssecurity.com/showthread.php?t=180489

 

Open GeSWall Console. In the Console Root Directory, expand Applications, expand Email and News. Right-click your email client and select Properties. Select Always start isolated and then OK.

 

Ah thank you kindly

 

Anyone running GeSWall on security level High? I use the default medium level (Isolate known applications).

 

I Use medium.

 

When I did use GesWall (and I may again)
It was set to medium, except when my wife (the happy clicker) was using the pc, then I set it to high, so no pop ups with excellent protection.