maybe antivirus a good thing to run w/ AH?

[Brenjen]

that looks interesting, I'm going to have to read up on it.

[Tigger29]

Skuzzy you should post a "sticky" on here detailing exactly what firewall settings to make should one decide to use one.  Also what Windows settings, etc to set and any other recommendations you have to make the computer more secure, and still AH friendly.

[Vulcan]

Originally posted by OOZ662
Eh.

Looks like a lot of marketing gibberish to me.

Just look for an ethernet firewall thats lists "SPI" and "ICSA" certified for $50-$100 and you're right.

However, if you want go totally over the top this is what I use: http://www.sonicwall.com/support/pdfs/DS_1204_PRO1260.pdf

[MrRiplEy[H]]

Originally posted by Vulcan
I agree with Skuzzy. Personal Firewall software these days is pretty much snake oil.

First of all most if not all PF's are 'leaky' and it is possible for malware to drill through them. So all the PF holds back is legit programs.

Second of all most good AV software protects you from the common attacks PF's used to cover (ie buffer overflow exploits).

Google "personal firewall leak test" and you'll find some nasty reading.

Maybe if you have a direct net connection and are not behind a router/firewall with even basic NAT - then perhaps I'd consider using one.

First of all a personal firewall does not keep any legit program back as it is extremely easy to configure it on need basis.

I've done the GRC leak test and none of the personal firewalls Ive used have leaked. I've used tiny personal and comodo for several years. They check the apps for md5 information and parent applications and if either one changes they get reported.

I refuse to run any computer without a PF installed, without it I have no control over the network traffic. I've caught spyware and trojans with PF that antivirus happily let through. Only indication was an unknown process trying to access internet - which was reported by the PF.

I tried the tests at firewallleaktester.com and some were picked by NOD32 and others with Comodo. The 'result' page was outdated, it showed comodo as leaking to exploits that were correctly blocked in current version.