On Sun, 12 Oct 2003 23:04:45 -0400, Miggsee wrote:
>
>"Mike0000" <> wrote in message
>news:HYnib.272929$ .net...
>> Miggsee wrote:
>>
>>
>> > The XP firewall doesn't stop out going attempts to *phone home*.
>>
>> So? That's not what he's asking for and arguably its needless complexity
>> for a simple home machine for a non-tech user.
>>
>> Run AV and do spyware checks from time to time.
>
>I was stating a simple and important fact. My machines are as protected as
>possible in today's world of computing.
Firewall.com is an interesting place to visit.
http://firewall.com/cgi-bin/jump.cgi?ID=1286
[Emphasis mine]
"An Internet firewall examines all traffic routed between your network and the
Internet to see if it meets certain criteria. If it does, it is routed between
the networks, otherwise it is stopped. ****A network firewall filters both
inbound and outbound traffic.**** It can also manage public access to private
networked resources such as host applications. It can be used to log all
attempts to enter the private network and trigger alarms when hostile or
unauthorized entry is attempted. Firewalls can filter packets based on their
source, destination addresses and port numbers. This is known as address
filtering. Firewalls can also filter specific types of network traffic. This is
also known as protocol filtering because the decision to forward or reject
traffic is dependant upon the protocol used, for example HTTP, ftp or telnet.
Firewalls can also filter traffic by packet attribute or state."
>
>There are new users reading this newsgroup, that do not know about all
>malware, nor about Trojans. XP won't always protect them.
XP won't protect them at all. Only knowledge, and the right tools, will protect
their systems.
>
>A decent firewall is configurable against out going *transmissions* from the
>user's computer: Personal info spread; virus; worms; malware; relaying,
>etc..............................
This is exactly right. These days it is becoming increasingly common for boxes
to suffer infection attempts within minutes, and sometimes even seconds, of
connecting. Users may not become aware they are infected until their firewall
alerts them of *outbound* connection attempts. Since there are so many software
firewalls available that do in fact alert on both incoming and outgoing
attempts, a single-direction firewall such as the one built into XP should not
even be considered an option if security is a consideration - and if security
isn't a consideration, that box should not be allowed to connect to the
internet.
"Why take such a large risk when it isn't necessary?"
>
>I would rather refer users to alternate methods of protection, than
>suggesting they trust the complete reliability of XP's firewall.
>
>I work with non-tech users every day! I teach them, not mislead them!
If you can read this, thank a teacher.
"And I do.

"
--
I always try to go the extra mile at work, but my boss always
finds me and brings me back.