good firewall for win 7

ShakenNstirred · 21 May 2009 at 14:44

whats a good firewall for win 7 64 bit?
thanks

Jumping · 21 May 2009 at 15:07

The built-in works OK and its very cheap

ShakenNstirred · 21 May 2009 at 15:30

strangely after i turned it off, it wont turn back on

J.B · 21 May 2009 at 16:24

ShakenNstirred said:
strangely after i turned it off, it wont turn back on

That sounds more interesting than just specing a firewall.

What happens when you go to turn it back on?

DragonWoLf · 21 May 2009 at 16:29

kaspersky, beta version for win 7

EDIT: licence runs out in Nov, the one that comes with the beta anyways

ShakenNstirred · 21 May 2009 at 17:46

J.B said:
That sounds more interesting than just specing a firewall.

What happens when you go to turn it back on?

it says windows firewall cant change some of your settings
ec-0x8007042c

i googled the code and it say run a reg repair but the 1 its says to use doent work with 64bit

Gothic Draconia · 21 May 2009 at 19:18

Use the built in firewall and install Vista Firewall Control to control outgoing comms.

J.B · 21 May 2009 at 22:07

Might be some kind of dependancy service failure.

Try running services.msc and seeing if you can start Windows Firewall service and its dependancies.

You might have some sort of virus/malware thats stopping it from starting

NathanE · 21 May 2009 at 22:19

No need for third-party software firewalls these days. They're obsolete.

deuse · 21 May 2009 at 23:02

NathanE said:
No need for third-party software firewalls these days. They're obsolete.

I got Comodo on Win7 and it stopped 3 connectios trying to use Services
the IP addy was some guys in mexico.

Windows firwall never picked it up. What would you do to stop things like that?

Generious · 22 May 2009 at 22:27

deuse said:
What would you do to stop things like that?

Stay away from ze p0rn sites and you won't have that problem

NathanE · 22 May 2009 at 22:37

deuse said:
I got Comodo on Win7 and it stopped 3 connectios trying to use Services
the IP addy was some guys in mexico.

Windows firwall never picked it up. What would you do to stop things like that?

I'd not get infected with carp in the first place... a.k.a.. Vista x64 with UAC.

Software firewalls trying to police what your computer can send out are on a losing battle I'm afraid. There will always be some malware that raises the bar to get past them.

deuse · 22 May 2009 at 23:14

I got UAC at the default settings on Win7
I am not infected either I run CCleaner/Nod32/Advanced systemcare/Malwarebytes every time
anyone in the house hold use the comp and all is clean.

There again you never know if you have a virus/malware untill you put anti both on do you?

So a cisco firewal would be ok as I can get one of those off a friend.

EDIT=And there is already a malware out that turns off UAC in Vista and Win 7

Mattus · 22 May 2009 at 23:27

deuse said:
EDIT=And there is already a malware out that turns off UAC in Vista and Win 7

But to do that it needs to get onto your system in the first place, which it won't if you use UAC judiciously

deuse · 22 May 2009 at 23:39

Mattus said:
But to do that it needs to get onto your system in the first place, which it won't if you use UAC judiciously

A friend of mine who deals with cisco stuff tells me that there is a VBS
that does not ask you to run till after the harm has done.

He says it gets on your comp then as the download finishes(the small windows opens)it will run with out you
knowing then the small windows opens
and asks you if you want to run that VBS most people will say no
but it dont matter its already auto ran its self.

This is a link to a some guys trying to do it that made MS update UAC

http://www.neowin.net/news/main/09/02/05/microsoft-update-on-windows-7-uac-issues

And I know for a fact I can get a program off the net ping a IP for about
10 hours and find a open port(not that I would do)
And do some damage once I am in.

It just funny I was on the BBC website and comodo came up
about certain IP addys was trying to access my services UAC saw nothing.

Mattus · 22 May 2009 at 23:47

deuse said:
It just funny I was on the BBC website and comodo came up about certain IP addys was trying to access my services UAC saw nothing.

Probably because that has nothing to do with the function of UAC? It's not a firewall :confused:

deuse · 22 May 2009 at 23:55

Mattus said:
Probably because that has nothing to do with the function of UAC? It's not a firewall

I know that

Thats why I use comodo.

Maybe I got this wrong but NathenE says
"
No need for third-party software firewalls these days. They're obsolete."

Do you know a better firewall then Comodo?

eXor · 23 May 2009 at 11:23

NathanE said:
No need for third-party software firewalls these days. They're obsolete.

What tool do you use for outbound filtering?

I fired up wf.msc, blocked inbound and outbound, disabled all existing rules and... got stuck on Windows Update.

I made a rule for svchost, bound it to Windows Update service, but the logs show dropped packets to remote port 53. DNS.

Maybe I'll use Vista Firewall Control from Sphinx to spy on access requests. In a VM.

I wish MS had built this in. Don't really want to install some dubious 3rd party app.

NathanE · 23 May 2009 at 12:15

deuse said:
I got UAC at the default settings on Win7
I am not infected either I run CCleaner/Nod32/Advanced systemcare/Malwarebytes every time
anyone in the house hold use the comp and all is clean.

But you said a minute ago that you was infected with some crap trying to connect to random foreign servers?

deuse said:
There again you never know if you have a virus/malware untill you put anti both on do you?

Only noobs need AV software to tell them they're infected. Seriously.

deuse said:
So a cisco firewal would be ok as I can get one of those off a friend.

A hardware firewall is only as good as the person setting it up. You have to set up a firewall policy which can take time to think up all the rules. I have a Sonicwall here at home and I spent about a month configuring rules. As an example of one of my favourite rules: I have locked it down so that only OpenDNS can be used - not any other DNS servers.

deuse said:
EDIT=And there is already a malware out that turns off UAC in Vista and Win 7

It would need to be elevated by UAC in the first place to do that. Any serious flaws in UAC will be (and are) fixed by Microsoft very swiftly. However, to date, there has not been any such flaws. Windows 7 may have flaws but that is still beta. Microsoft are still playing with the UAC strictness on that OS to strike the right balance.