firewalls

[Logan 5]

Hello,

In the last month or so I have read a lot on both the suggest a fix (SAF) and voice of the public (VOP) web sites and now also here on firewalls. It seems most (but certainly not all) people like ZoneAlarm or Tiny.

It seems the people who like Tiny really don't like ZoneAlarm (ZA or ZAP). I don't see the reverse with people who use ZAP.

I use ZAP as it was touted by such people as SmartComputing Magazine, PC World, Steve Gibson etc... Plus the fact you don't really need to make any rules for it (sort of fire and forget). I have considered Tiny if only because a lot of people on various sites really seem to like it. Except I have no idea how to set Tiny up to make me as safe as I feel with ZAP. As the saying goes "I know enough to be dangerous". Most of what I read on here amazes me how you guys know this stuff.

I have visited many security sites recommended by posts on this site, SAF and VOP. Every time I come up stealth. It seems ZAP is doing a really good job stopping anything coming in and I know it works with stuff trying to go out.

So my reason for posting this is this. What makes Tiny so much better than ZAP (that is for those of you who feel this way). If I am in stealth mode to any income scan, what would Tiny do for me to make me safer. Like I said, the rule setting in Tiny would make me nervous to try to set. What would I gain from using Tiny as far as being safer ect..

Thanks
Jim

[cyberskye]

Hi,

I do not use Tiny, but I have read its manual. It gives greater control over your connection. That doesn't mean better security (tho Tiny may, I don't know). If you have complex needs, Tiny is more flexible. It seems more appropriate for someone running servers (or who just wants to learn more about the nitty-firewall-gritty). A single machine connected to the net for browsing/downloads is fine with ZA(P) - at least until a new vulnerability is discovered.

Rules based firewalls in general are service-oriented (ftp, http, pop3, etc), where ZA is application-oriented (Outlook, IE, etc)

Skye

[Matt615]

As was said above Tiny may not make you any safer but you can go into much greater detail as to what you want your firewall to do. I dont Use Tiny, I use ZA. I find it to be a great firewall, and maybe one of these days I am going to try Tiny. I know how to set all the rules and what to do and everything but ZA seems to be doing a great job so why change.

If you are unsure about what rules to set and what to do in Tiny then stay with ZAP because you could set something incorrectly that may make you vulnerable to attack.

Matt

[Logan 5]

Matt615 & cyberskye,


Thanks for the help. ZAP has been working very well for me. And I would be unsure about what rules to set and what to do in Tiny so I feel better for now sticking with ZAP. I just want to be protected both incoming and outgoing and leave it at that. No extra work.

I use ZoneLog Analyser to see what is coming at me. Still not sure about the "attacks" it reports. I assume someone is doing a random search and I get scanned as well.

Thanks again,
Jim

[W_I_Z_K_I_D]

Originally posted by Logan 5

So my reason for posting this is this. What makes Tiny so much better than ZAP (that is for those of you who feel this way).

Thanks
Jim

Well Jim
For me Tiny really gets down and gives you access to the Nuts and Bolts of what a firewall is allabout ...

Tiny Gives you a Status screen (Showing all Inbound and Outbound Connections) whitch i think is a GrEaT Feature.

With Tiny it makes me feel allot safer when Guarding or Monitoring Spacific Ports....
I Have a rule in Tiny called *Trojan Ports*
Monitors sutch TroJan Ports as the allFamous 12345

Allong with most other Firewalls ,you have controlover what applications use the net and inwhat way the application use the connection.
With ZONEALARM you tick allow server or allow connect to an application(program) and from there it can do what it whants when connecting to a server or sending info.

When it comes to TINY...You can give the appliacation access and have control over what ip it conects to or server..and what port...so you have the info on where the program is connecting outto..or even what is trying to connect ito it...you dont have that kinda control with zonealarm~!@

Thats my thaughts Jim....

[KSJNX]

In my opinion tiny is one of the last good free firewalls bear with me.

i tend to stay away from protection programs with a but such as zonalarm well this has good security BUT if you upgrade to zonealarm pro you get this mutch more. this scares me basicly saying there might be a problem or a hole in za and there isn't in zap (not saying this is true). there is no tpf pro so that makes me think there offering the best program they can make to protect users for free. well maybe i'm wrong or maybe those chips i just ate are spiked with acid but that's the way i see it.

[cyberskye]

Alo,

ZAP gives you greater control over the connection. Not as much as TPF, though.

Check out WinrouteLite and WinRoutePro at the tiny software web site. They are expensive but give more options. That is generally the difference between free and paid versions.

Skye

[W_I_Z_K_I_D]

Originally posted by KSJNX
In my opinion tiny is one of the last good free firewalls bear with me.
there is no tpf pro so that makes me think there offering the best program they can make to protect users for free. well maybe i'm wrong or maybe those chips i just ate are spiked with acid but that's the way i see it.

Totally agree man...ps:..Sure it was chips man...none of the wacky tabacky..?