Kerio Personal Firewall to be discontinued

[Inthewoods]

The best internet firewall (IMO) is going to be discontinued 12/31/05. Read the announcement here:http://forums.kerio.com/index.php?t=thread&frm_id=11&S=316109ad3af2a86032f587fe591457c2

As far as I'm concerned, while I like Zonealarm, it's been too much of a target for hackers due to it's popularity, and Sygate is a pile of crap, so I'm trying this right now:http://www.r-firewall.com/. It looks promising so far.

Actually, I'll be sticking with the last released version of Kerio until it becomes unsafe due to obsolescence. the R-Firewall is just a contingency plan right now. Does anybody else have any suggestions? (please don't try to talk me into using Sygate or Zonealarm)

[Toe]

Outpost, maybe? But if you didn't like Sygate, you probably won't like Outpost either...

[Inthewoods]

Outpost, maybe? But if you didn't like Sygate, you probably won't like Outpost either...I'm not sure why you made that last statement, but maybe I'll give Outpost a try, I last tried it a couple years ago.

My problem with Sygate is basically security test failures, as well as no support for fast user switching, which is heavily used on our machines.

[biggman15]

As far as I'm concerned, while I like Zonealarm, it's been too much of a target for hackers due to it's popularity, and Sygate is a pile of crap, so I'm trying this right now:http://www.r-firewall.com/. It looks promising so far.

Actually, I'll be sticking with the last released version of Kerio until it becomes unsafe due to obsolescence. the R-Firewall is just a contingency plan right now. Does anybody else have any suggestions? (please don't try to talk me into using Sygate or Zonealarm)

I use BlackIce.... It's not Free so that probably won't be an Option...

R-firewall is The Firewall I've chosen in case BlackIce becomes a Danger....

[Todd The Kiwi]

everyone i know that's had *blackice installed has had major problems with it.

woods - hardware firewalls seem to be quite popular around here mate, how about one of those?

*unless i have the name muddled up with something similar sounding...

[acushla]

...while I like Zonealarm and Sygate is a pile of crap...

So let's see if I have this correct: You like ZONEALARM but think SYGATE is 'a pile of crap'.?

Are you certain you didn't mean this to be the other way around? (Whoops, better put the smiley in!) :puzzled: :)

[Inthewoods]

So let's see if I have this correct: You like ZONEALARM but think SYGATE is 'a pile of crap'.?

Are you certain you didn't mean this to be the other way around? (Whoops, better put the smiley in!) :puzzled: :)Ya, I'm sure.:rolleyes:

[Inthewoods]

With the apparent demise of Kerio Personal firewall looming a couple months ahead, I seem to be morphing into some sort of security junkie. As I mentioned earlier, I was trying out r-Firewall, I decided it had some pretty significant flaws. However now I've found yet another new firewall, so here I go again:http://www.sensiveguard.com/

This one seems to combine most of the good features of Kerio and ZA, while overcoming some of their shortcomings. Once again, only time will tell, but, aside from the butt-ugly interface (why the heck can't somebody design a decent firewall that doesn't look like it was designed by some uber-geek in his parent's basement...apologies to the geeks...some of my best friends are geeks...really..)

But I digress..I was going to say, this firewall looks very promising.

[jawpr]

With the apparent demise of Kerio Personal firewall looming a couple months ahead, I seem to be morphing into some sort of security junkie. As I mentioned earlier, I was trying out r-Firewall, I decided it had some pretty significant flaws. However now I've found yet another new firewall, so here I go again:http://www.sensiveguard.com/

This one seems to combine most of the good features of Kerio and ZA, while overcoming some of their shortcomings. Once again, only time will tell, but, aside from the butt-ugly interface (why the heck can't somebody design a decent firewall that doesn't look like it was designed by some uber-geek in his parent's basement...apologies to the geeks...some of my best friends are geeks...really..)

But I digress..I was going to say, this firewall looks very promising.


Sounds interesting - Let me know how it goes?

[acushla]

... but, aside from the butt-ugly interface (why the heck can't somebody design a decent firewall that doesn't look like it was designed by some uber-geek in his parent's basement...

I guess we can safely say that this would be just one more area that SYGATE excels at...maybe they could hire that designer? :cheeky: :)

[Willow of Oz]

...I seem to be morphing into some sort of security junkie.
...why the heck can't somebody design a decent firewall that doesn't look like it was designed by some uber-geek in his parent's basement...

um, dude.
We're talking about firewalls here.
Specifically, you - someone who is "morphing into some sort of security junkie" - are talking about firewalls. :biggrin:

[Protocol]

I think you will see a lot of third party firewalls hit the wall in the coming months now as many people opt for Windows Firewall and with the more robust firewall built into Vista, most people won't see the justification in looking for a third party alternative. Particularly the non-free ones. Also, these days many people are running hardware firewalls as most modem / routers have this functionality built-in. Aside from all this, most are too heavy on resources for my liking and are responsible for many connectivity issues which is a headache that the average PC user just doesn't want.

[Inthewoods]

um, dude.
We're talking about firewalls here.
Specifically, you - someone who is "morphing into some sort of security junkie" - are talking about firewalls. :biggrin:I'm not sure I understand your point but, well... allllllllrighty then. (shrug)

[Inthewoods]

Well, I downloaded Outpost Pro 3.0, just to try it. The first time I attempted to install it, I got a warning message to uninstall Kerio first, to I did, and then rebooted. I then installed Outpost Pro, the install proceeded fine with no further error messages.

After the post install reboot, my computer would not boot at all, or more accurately, it would startup, then black screen and reboot, again and again. I finally had to uninstall Outpost from safe mode and reinstall Kerio.

Now, I tend to get a little cranky with programs that trash the OS, especially a program I am supposed to trust with my system's security. I didn't attempt a second install or troubleshoot it, because the buggy install broke my trust in the program.

Yes, my system is virus and spyware free.

Sloppy work, Agnitum, especially for a program you're asking money for. I won't use it again.

[Protocol]

Well, I downloaded Outpost Pro 3.0, just to try it. The first time I attempted to install it, I got a warning message to uninstall Kerio first, to I did, and then rebooted. I then installed Outpost Pro, the install proceeded fine with no further error messages.

After the post install reboot, my computer would not boot at all, or more accurately, it would startup, then black screen and reboot, again and again. I finally had to uninstall Outpost from safe mode and reinstall Kerio.

Now, I tend to get a little cranky with programs that trash the OS, especially a program I am supposed to trust with my system's security. I didn't attempt a second install or troubleshoot it, because the buggy install broke my trust in the program.

Yes, my system is virus and spyware free.

Sloppy work, Agnitum, especially for a program you're asking money for. I won't use it again.
Don't use any third party firewall. Just another unnecessary drain on your system and another thing to cause connectivity issues and other issues in my opinion. :)

[acushla]

Don't use any third party firewall. Just another unnecessary drain on your system and another thing to cause connectivity issues and other issues in my opinion. :)

This is a mantra I am hearing over and over again.

[jawpr]

Don't use any third party firewall. Just another unnecessary drain on your system and another thing to cause connectivity issues and other issues in my opinion. :)

That's my opion also.

[Todd The Kiwi]

Don't use any third party firewall.
you really trust windows firewall that much mate?
it has to be better than NIS :biggrin:
if it's that good why are there so many third party firewalls?

this isn't supposed to sound accusatory, i'm just wondering.
partly because i REALLY want to agree with you
and ditch (as it happens) ZoneAlarm.

woods - thanks for the 'warning' too man :phewicon:

[Toe]

Now, I tend to get a little cranky with programs that trash the OS, especially a program I am supposed to trust with my system's security. I didn't attempt a second install or troubleshoot it, because the buggy install broke my trust in the program.
I should note that that's half the reason I stopped using Kerio - I would sometimes get BSODs out of it.

I didn't even know Outpost 3.0 was out. I've only used the free 1.x version.

[biggman15]

if it's that good why are there so many third party firewalls?

this isn't supposed to sound accusatory, i'm just wondering.

Because The Windows Firewall is New... Most of these So Called Third Party Firewalls have been around for Years...

[Rex_Mundi_Incarnit]

I use the windows firewall. I never had problems with it. It can equally be configured just like any other firewall application.

[Sheepeh]

Most hate directed at Windows Firewall is "it's-fun-to-bash-Microsoft" whining. The only thing it doesn't do as well as the 3rd party configs is proper outbound filtering.

For home users it's enough to keep you secure unless you personally invite someone skillful to try and get round it and then you might as well take every protection method you have and throw them in the bin.

Firewalls a tools, not magic bullets to security - choose the one that's easiest for you to set up correctly and isn't going to block too much stuff or piss you off because the second you think "Oh it doesn't matter I'll turn it off for a bit to do xyz" is the second you're asking for a digital slap in the chops.

Personally, I use the hardware firewall built in to my router (yes a real one, not just NAT protection), I turn off my motherboards inbuilt firewall (NVidia's drivers for it are complete tat, and leave Windows Firewall enabled with all my p2p programs using a random port via UPnP.

It's worked so far for me!

[Protocol]

Personally, I use the hardware firewall built in to my router (yes a real one, not just NAT protection), I turn off my motherboards inbuilt firewall (NVidia's drivers for it are complete tat, and leave Windows Firewall enabled with all my p2p programs using a random port via UPnP.

It's worked so far for me!
Me too Sheepy... :)

---------------------------------
Believe me. You will NOT find yourself saying in the future. "I wish I had installed a third party firewall." :cheeky:
Instead. You will find yourself saying very soon. "Why did I have a third party firewall installed all this time draining my resources for no gain?" :ermm:
---------------------------------

:cheerful: Something that has always confounded me in this forum (and others) is the number of members who complain about certain audio players (or applications) being too heavy or bloated. It is usually an application that is not usually running all the time, and then I read in another thread that they are running a third party firewall 24/7. And even worse, they may even be running some TSR anti-spyware application. I guess there is little wonder why that particular person is looking for ultra light applications when their system is already heavily burdened before they even open up an application.
I start wondering just how sluggish people are prepared to have their computers running in order to have over-the-top-security. To me, in most cases the supposed cure is worse than the potential harm.

Take care... :)

[acushla]

if it's that good why are there so many third party firewalls?

:

If (insert name of band here) are that good why are there so many other bands? :bulb: ;)

[acushla]

.

Personally, I use the hardware firewall built in to my router (yes a real one, not just NAT protection), I turn off my motherboards inbuilt firewall (NVidia's drivers for it are complete tat, and leave Windows Firewall enabled with all my p2p programs using a random port via UPnP.

It's worked so far for me!

Just to clarify...what I am hearing is that you use your routers firewall AND Windows Firewall. :puzzled:

[Protocol]

you really trust windows firewall that much mate?
it has to be better than NIS :biggrin:
if it's that good why are there so many third party firewalls?

Some are being discontinued. I think I saw a thread in this forum about some third party firewall being discontinued. :)

[biggman15]

Some are being discontinued. I think I saw a thread in this forum about some third party firewall being discontinued. :)
:biggrin: :silly:

[Inthewoods]

Some are being discontinued. I think I saw a thread in this forum about some third party firewall being discontinued. :)Ummmm, well yah, that would be this thread. As far as trusting Windows Firewall, it stealths everything just fine, but does nothing to monitor outgoing traffic (it wasn't designed to). Actually, Kerio is very robust and works extremely well, so I'll probably continue to use it even after development stops unless some new threat comes along that it doesn't address.

BTW, forget SensiveGuard, it only stealths a handful of ports. Even Windows Firewall does better than that.

[Sheepeh]

Just to clarify...what I am hearing is that you use your routers firewall AND Windows Firewall. :puzzled:

Yes. A hardware one and a software one. I have the hardware one which is positioned at my physical point of entry (my cable modem) and my software ones running on each of my client PCs as they are on a wireless network (which is also WPA encrypted).

Both the software and hardware have UPnP enabled meaning stuff like MSN Messenger and BitTorrent can open their own ports while in use and close them again when they are finished. I find that's enough security to deter and script kiddies who might me looking in.

[acushla]

Yes. A hardware one and a software one.

Having installed a wireless router at the beginning of the week, I thought I would follow suit and so went into Windows Security Center to turn the Windows Firewall 'on'. I received this message:

Windows firewall settings cannot be displayed because the associated service is not running. Do you want to start the Windows Firewall/Internet Connection sharing (ICS) service? Yes/No

After clicking 'Yes' I receive the following message:

Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service

Has the Firewall in my router disabled Windows Firewall?

[Protocol]

Having installed a wireless router at the beginning of the week, I thought I would follow suit and so went into Windows Security Center to turn the Windows Firewall 'on'. I received this message:

Windows firewall settings cannot be displayed because the associated service is not running. Do you want to start the Windows Firewall/Internet Connection sharing (ICS) service? Yes/No

After clicking 'Yes' I receive the following message:

Windows cannot start the Windows Firewall/Internet Connection Sharing (ICS) service

Has the Firewall in my router disabled Windows Firewall?

This is usually caused by spyware corrupting your Winsock. Windows AntiSpyware is also known to cause it. You probably just need to reset it.

Go to the command prompt.
Type the "Netsh winsock reset" (without the quotes), and press Enter.
Go to Control Panel > Administrative Tools > Services.
Scroll to windows firewall/internet connection sharing and open it.
Make sure that the startup type is set to automatic.

Restart and try again. :beer:

[Protocol]

This is usually caused by spyware corrupting your Winsock. You probably just need to reset it.

Go to the command prompt.
Type the "Netsh winsock reset" (without the quotes), and press Enter.
Go to Control Panel > Administrative Tools > Services.
Scroll to windows firewall/internet connection sharing and open it.
Make sure that the startup type is set to automatic.

Restart and try again. :beer:

You need to run a full spyware scan to ensure whatever caused this is gone. Spybot is probably your best option.

[acushla]

Go to the command prompt.
Type the "Netsh winsock reset" (without the quotes), and press Enter.
Go to Control Panel > Administrative Tools > Services.
Scroll to windows firewall/internet connection sharing and open it.
Make sure that the startup type is set to automatic.

Restart and try again. :beer:

Thanks. :)

Followed these instructions to the letter...including a restart...but things remained exactly the same.

I run Ad-Aware and Spy-Bot at the conclusion of each session...as well as connecting to ewido at least once a week. Nothing. I searched around for some other (good) ideas...and tried reinstalling it from Service Pack 2...with similar results....

Not sure what my options are at this point, but I would like to get it running.

[Protocol]

Thanks. :)

Followed these instructions to the letter...including a restart...but things remained exactly the same.

I run Ad-Aware and Spy-Bot at the conclusion of each session...as well as connecting to ewido at least once a week. Nothing. I searched around for some other (good) ideas...and tried reinstalling it from Service Pack 2...with similar results....

Not sure what my options are at this point, but I would like to get it running.
Try running LSP-Fix (http://www.cexx.org/lspfix.htm). If it still doesn't fix it after you run that, then follow my instructions again after running it.

[acushla]

Try running LSP-Fix (http://www.cexx.org/lspfix.htm). If it still doesn't fix it after you run that, then follow my instructions again after running it.

I have to tell you...this one makes me a little nervous. I am really not knowledgeable enough to feel confident executing this program.

I do not see anything referring to 'Firewall'...only to difficulty in getting onto the Net.

I think I will reinstall SYGATE and leave it at that for the time being.

I have considered using 'restore'...going back to a time before installing the router...but then I realized I wasn't using Windows Firewall...only SYGATE...so who knows when it stopped working.

It also occurred to me that perhaps when I uninstalled SYGATE after getting the Router (from Add and Remove Programs)...perhaps something went with SYGATE that shouldn't have.

I have to tell you...I was really surprised that I was not able to install it from my XP Pro Install Disc or from SP 2.

[Sheepeh]

I can confirm its safe mate, I used it to fix one of my machines in the past. I suggest you give it a crack. You can't break what's already broken!

[acushla]

I can confirm its safe mate, I used it to fix one of my machines in the past. I suggest you give it a crack. You can't break what's already broken!

I’ve opened up the LSP Fix and this is what appears on my screen:



Winsock 2 Repair Utility

This program repairs Layered Service Provider (LSP) stacks damaged by buggy or improperly removed LSP software. Please read the documentation that accompanies this program before using it.

KEEP.............................................. ..............................REMOVE

File..........................Description

Mswsock.dll ..............Tcpip
Winrnr.dll...................NTDS
Rsvpsp.dll..................(Protocol handler)


I have read the documentation and frankly, know about as much about how this program is to be used as I knew before I read the notes. :puzzled:

So… this is where I am at present…any suggestions?

[Protocol]

Check out this page here (http://windowsxp.mvps.org/sharedaccess.htm) mate. It is slightly more involved then what I suggested. It involves merging a registry entry, then running the command as I suggested above.

[acushla]

Check out this page here (http://windowsxp.mvps.org/sharedaccess.htm) mate. It is slightly more involved then what I suggested. It involves merging a registry entry, then running the command as I suggested above.

Yikes...I needed a nap after that! :ermm:

You know how people talk about the journey in life as being what's important...and not the destination? Those people don't have computers! (lol)Fascinating...but still I seem to be without Windows Firewall.

I followed everything down to "Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2"...at which point I concluded I don't really care anymore. Sygate seems to be working fine...so I don't believe it is really an issue.

I did reinstall service pact 2...but again...nothing.

I imagine if I knew how to read the results from the command.exe better...I might have a little more insight as to what is going on. For example, in several places I see after query ipnat SERVICE_NAME= ipnat
TYPE...........................= 1 KERNAL_DRIVER
STATE.........................= 4 RUNNING
................................<STOPPABLE,NOT_PAUSABLE,IGNORES_SHUTDOWN>
WIN32_EXIT_CODE........= 0 <0x0>
SERVICE_EXIT_CODE......= 0 <0x0>
CHECKPOINT................= 0x0
WAIT_HINT..................= 0x0

It certainly was fun and a bit of an eyeopener to the amount of resources available..but it leaves me with an even greater sense of wonder as to WHO THE HELL INVENTED THIS THING ANYWAY?...and what is he working on now?