Which Firewall?

NetVeda or Kerio 2.1.5

 

I use BitGuard - Developed in Denmark, made by danish folks
It has loads of features, really fast and state-of-the-art protection.
It 'becomes' a part of the OS deep deep inside (ring 0), not another app like the other firewalls are.

http://www.tryus.dk/bitguard.asp

 

Hi Erik,

If those are your feelings about firewalls then may I suggest you try out CHX. It is also:

1. Free.
2. Easier then ZA. Import the 2 workstation filters from their web site. You'll be totally stealthed and won't have to deal with popups asking you for permission all the time.
3. Same.
4. Same.

and:

5. Far less resources then ZA.

Regards,

Jaws

 

Jaws,
I will check it out next week.
I'm not in love with my "ZoneAlarm Free".
I ditch every security software without regrets, when it is better and free of charge.

 

Erik, you won't regret it.

Especially if you believe in your signature. Simplicity is always brilliant. That's a good one.

Jaws

 

Jaws,
Keep in mind that I never heard of CHX Firewall before.
I have troubles with finding the FREE version of CHX.

I found this website,
http://www.idrci.net/idrci_products.htm
I assume that this is the home page of CHX, but that website has only trials (30 days) and that isn't really freeware.

Is the free version hidden in the trial versions or what ?

 

Erik,

You can go HERE and register if you want to. That's what I did, it's free.

Or you can go HERE for full version CHX Packet Filter 2.8.2. I really don't know what the difference is.

But the site you got is their home site. Also you can get the sample filter sets by cliching on Downloads there. If you're on a standalone PC go to network interface after you install CHX, right click, and import the workstation filters.

Post back in the CHX thread if you have more questions. I'll try to help and there are a few more people here that can help you.

Regards,

Jaws

 

CHX it's free for home users.
You have to registrate!

Regards

 

@Jaws,
Thanks for the links, I will install it next week and keep these links on a CD
together with the install files.

@Colorado13,
You are right about that, I have read this in another forum a few moments ago.
Well I have no problem with that as long it is free LOL.

 

Erik,

This SITE also has a lot of info and different filter sets for CHX.

Have fun,

Jaws

 

does CHX offer rules for p2p and IM like LnS does?

 

No they don't and that I can't help you with, but read through the recent CHX threads for a lot more info about p2p and other stuff.

Regards,

Jaws

 

That isn't a problem for me anyway.
I don't use P2P and IM for security reasons.
LnS would be a problem for me, I'm not able to create rules.

 

how is that so? LnS does offer this ability, u just have to learn how to properly create them. or are u referring to the lite version? i think the lite version just doesnt offer application monitoring tho.

 

Hi all!

You can run certaint p2p programs under CHX-I! There is a problem running Emule/Emule.lite at the momment. (Due to a problem on cetaint systems being able to connect to servers.) But, Bit Torrent, IRC and various other chat programs work fine...

Regards
Jazzie

 

That is exactly the problem, "I have to learn how to create them". I don't want to do this.
I have a personal problem with security softwares in general. It's not my favorite group of softwares.
As long I don't need to work/learn for them, I will use them, but nothing more than that.

 

unfortuneately, emule is my primary p2p app tho ill occasionally use azureus.

then outpost would serve u better as outpost has predefined rules for many apps. or u could go with zonealarm or sygate both of which simply deny or allow all. theres also kerio (4.x) and tiny, but i havent much experience with either. lastly theres rule-based firewalls like chx and LnS or kerio (2.x). which ever firewall u decide on, i wish u good luck. if u have any questions u can just post here at wilders.

 

I am sure that someone will figure this out! I was able to connect with it, but didn't see the whole list of servers, due to most likely time-outs... Maybe someone on the board here that are 'FANS' of Emule will do enough testing to nail the problem...

Regards
Jazzie

 

I think that I am right in saying that, unlike most of the other firewalls mentioned, CHX-I does not have outbound application control. Some are using other firewalls such as ZoneAlarm and Look'N'Stop with packet filtering switched off to provide application control for CHX-I. I just thought that I had better mention that as ErikAlbert hadn't heard of CHX-I before.

 

Right you are!

Regards
Jazzie

 

Although CHX lets you create filters for outbound traffic, it won't let you do it on a application level, rather you can block outbound for specific ports, CHX works the best when combined with something like Jammer.

 

is there any alternative to Jammer as it is outdated and unsupported? or is LnS good enough to run with CHX?

 

LNS with inet filter and options DISABLED works fine!

Regards
Jazzie

 

As Jazzie mentions, LnS works fine with CHX, as does ZA also when you turn off inet filtering and just use the app control.

 

Regarding emule and CHX-1, I had no problems. In fact CHX-1 managed emule particularly well because it has pseudo stateful UDP. All that is needed is a standard set of rules plus an allow rule for the TCP server port (default is 4662) with no particular flag specified so that incoming connections will be accepted. I don't use Kad, so no UDP server port is specified. Worked like a charm.