Which firewall is easiest for making "on the fly" IP addr rules after viewing a log?

Discussion in 'other firewalls' started by Mr. Y, Jun 5, 2011.

Thread Status:
Not open for further replies.
  1. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    Which firewall is easiest for making "on the fly" IP address rules after viewing a internet log?
    After all, what good is a firewall if it's difficult and awkward to make IP address rules in response to what you see in a internet log?

    I just tried:
    1. Online Armor and,
    2. Private Guard
    Both are awkward to use.

    Jettico is the easiest to use so far- I can make rules directly from their internet log without having to go through a bunch of menus. Tiny Personal Firewall (TPF) is obsolete.

    Anyone have opinions?
     
    Last edited: Jun 8, 2011
  2. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,075
    You can do it with Comodo, take a look to see how looks like: http://help.comodo.com/topic-72-1-170-1692-Application-Rules.html

    Or take a look to this one http://www.looknstop.com/En/index2.htm
     
  3. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
  4. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    I just tried Look N Stop firewall and it failed the above criteria.
     
  5. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    I think Filseclab FW can do this
    Log applications
    Filseclab FW_log applications.jpg
    Monitor applications
    Filseclab FW_monitor applications.jpg
    Monitor connections
    Filseclab FW_monitor connections.jpg
     
  6. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,499
    Doesn't look n stop auto make a rule when you right click on the log entry?
    ellison
     
  7. Bob D

    Bob D Registered Member

    Joined:
    Apr 18, 2005
    Posts:
    1,150
    Location:
    Mass., USA
    Re: Which firewall is easiest for making "on the fly" IP addr rules after viewing a l

    Filseclab is a bit dated, but I liked it when I ran it some time ago.
    One thing I very much liked was it's logging, in that every log entry's "allowed" or "blocked" bit of traffic is associated to a specific rule number. Makes diagnosing any issues fairly easy.
    Great convenience when troubleshooting / editing rules.
     
  8. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,485
    Location:
    Poland - Cracow
    Re: Which firewall is easiest for making "on the fly" IP addr rules after viewing a l

    I like it very much too and sometimes I return to it ... just sentiment :) Although it is fairly old program, I think it can be still good, efficient and usefull.
     
  9. whitedragon551

    whitedragon551 Registered Member

    Joined:
    Sep 30, 2008
    Posts:
    3,189
    Location:
    USA
    How so? You click it and set as a rule in the log.
     
  10. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    It refuses to make a rule whenever I tap "Create Rule"
     
  11. SourMilk

    SourMilk Registered Member

    Joined:
    Mar 31, 2006
    Posts:
    630
    Location:
    Hawaii
    While your at it, you might try PC Tools firewall. IIRC, it was pretty easy to configure once you figured out how to get to the rules editor.

    Good luck,
    SourMilk out
     
  12. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    "make a rule" is missing from my right click
     
  13. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    Re: Which firewall is easiest for making "on the fly" IP addr rules after viewing a l

    I tried it out, and thanks to your tips, it very easy to make rules "on the fly" from the Monitor.
     
  14. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    I'll check it out!
     
  15. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    Yea your right, it's fairly easy to configure.
    I wonder why people don't like it?
     
  16. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,499
    I cant remember exactly off hand as its been a while since i used it,but its possible you may have to enable advanced mode and log blocked packets,to get the right click option.
    ellison
     
  17. Stem

    Stem Firewall Expert

    Joined:
    Oct 5, 2005
    Posts:
    4,948
    Location:
    UK
    RE:- L`n`S

    Sounds like a possible corrupted install or conflict.

    From the L`n`S help file (helps files are usually a good place to look for info)

    log.jpg

    The options are there on my installation.

    - Stem
     
  18. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    I will try re-installing it!
    I hope it's not a virtual machine or OS corruption problem.
     
  19. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    I figured out what was going on: The "create a rule" is geared for creating rules to allow or restrict port access. You would have to manually keypunch in the IP address, that you want to restrict, from the log. It does not transfer the IP address from the log to the "new rule". This is unnecessarily labor intensive.

    If I am missing the boat, let me know.
     
  20. Mr. Y

    Mr. Y Registered Member

    Joined:
    Jan 11, 2006
    Posts:
    257
    Zone Alarm & Norton 360 and do not meet the criteria for "on the fly" rules.
     
    Last edited: Jun 11, 2011
  21. horch

    horch Registered Member

    Joined:
    Jun 16, 2011
    Posts:
    5
    One should never forget Malware Defender. The Log-Context Menu is pretty basic (create permit or deny rule), but: creating the rule will select the application in"rules window", where the rule can be modified.
     
Loading...
Thread Status:
Not open for further replies.