New FREE firewall

[RobRich]

I friend of mine just dropped me this link for a new free firewall for the Win9x enviroment:

http://www.zonelabs.com/download_ZA.htm

I'm currently downloading it, so I hope to have a quick review up soon. According to other news I've received, it passes the "Sheilds Up" internet security test quite well.

[RobRich]

I just succesfully downloaded and installed tha app, and I admit it actually does it job. If you can get past the annoying color of its control panel, it provides excellent firewall protection.

It uses the standard socks interface, meaning you don't have to set-up your applications to direct use any type of firewall or proxy server, it just traps all calls to the net for monitoring and filtering.

Using the default internet security test, Shields Up, at https://grc.com/x/ne.dll?bh0bkyd2 , I got the following results:

----Netbios Scan----

Attempting connection to your computer. . .

Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!

Please Note: On highly secure systems this may take up to one minute. . .


Your Internet port 139 does not appear to exist! One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.


Unable to connect with NetBIOS to your computer. All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.


----Port Scan----

21 FTP Stealth
23 Telnet Stealth
25 SMTP Stealth
79 Finger Stealth
80 HTTP Stealth
110 POP3 Stealth
139 NetBIOS Stealth
143 IMAP Stealth
161 SNMP Stealth
443 HTTPS Stealth

If all of the tested ports were shown to have stealth status, then for all intents and purposes your computer doesn't exist to scanners on the Internet!

This happens to be the easiest personal firewall I've used to date, plus it actually does its job without legnthy configuration menus. Many people may object to filling out the registration for it, but if you just hit next without entering any personal info, it will continue its install without any prob.

[jad1097]

Thanks I downloaded it as BlackIce leaves NetBIOS open.

[Target]

RobRich, THANK YOU for that link!!! I downloaded the application, installed it, and tested at Shields-up. I'm completely stealth to the net! Wooooo hoooooo

Free, easy to install and setup...what a great find.

[RobRich]

I was reading the FAQ, and I did find one small issue: to avoid the 30 day timeout, you must register the software (free registration). They claim no information about you will be released to any other company or consumer database. Just click change registration on the configure panel to take care of this issue. Mine is now registered and working great.

[This message has been edited by RobRich (edited 01-28-2000).]

[socalgal]

RobRich, sure sounds like you found something there.

I wonder how it compares to BlackICE, which I run (and paid for). If it does what BID does - for free, you indeed have a good find.

I'll post back if I find any comparison tests.

[gene1938]

THANKS-I passed shields up also-A little trouble setting options(I'm still new)for net access-but getting it handled
GENE
keep losing connection-any idea as to what setting I need to change??thanks again

[This message has been edited by gene1938 (edited 01-29-2000).]

[medo]

Hello

Thank you RobRich.
I installed it and it worked fine.
I am using Gatekeeper and on the first attempt to log on Hotmail from a client PC, the Zone gave a message "(Client) PC blocked from accessing Hotmail", but on the second attempt it went trough to the client PC (?).

Medo

http://www.sysopt.com/forum/smile.gif

[CMonster]

Pretty cool little proggy - how do I register the thing? The Internet settings have to be "medium" to connect via AOL.

[Ygor]

I use aol too. My lan setting is medium but my internet setting is on high, full stealth mode.

This is such a relief since we just recently got our home network working right. I didn't want those ports open!

[Andy_L]

Thanks a lot for the link, thanks to SYSOPt, I now have a free proxy and a free firewall!!

[richamies]

I'm running it and it looks very nice indeed! I'd been looking for a good free firewall for a while now, most of them are terrible to configure but this was simple!

Thanks a lot!

Just how do I register it? I can't work it out. It says "Your Registration Is Pending" in the box at the bottom - what have I missed?

[R[][]FER]

Great find RobRich...Thanks

When it says "Your Registration is Pending", Just leave it and it will send it through. It takes a little bit to complete.

[scotter]

I've been using it off and on for over a year now and becouse of your thread I checked it out again thanks much they finaly made it a full firewall before it would just tell you if someone was try to get out of your system not trying to get in to it
it's much better now and really works as a firewall thats so cool http://www.sysopt.com/forum/smile.gif

[U-96]

I think this is what Steve Gibson was hinting at for some time http://www.sysopt.com/forum/smile.gif
He was plugging ZoneAlarm before it became a firewall.

I'm now in full-effect ninja shadow mode and it's cool. It even blocked a scan from my own ISP without sideeffects. heheheh!

Sysopt, I don't like to tell you your business http://www.sysopt.com/forum/wink.gif http://www.sysopt.com/forum/wink.gif , but I for one would very much like to hear what ZoneAlarm have to say for themselves! Steve Gibson also sounds like a model netizen, I'm sure he would be an interesting guy to talk to... http://www.sysopt.com/forum/smile.gif

(please excuse my presumption)

U-96

[bell1]

Hello All
I'm using BlackIce,but does anybody know where to get a good "free" proxy?

[alan]

thanx rob i dont know much about firewall infact nothing
but im running dual boot 98/2000 networked to kids comp as server ran port probe and sheilds up apart from ip everything 100%secure but still gonna run it cause prevention is far better than cure.
alan http://www.sysopt.com/forum/smile.gif
I would appreciate it if someone could mail me some txt on firewall
al http://www.sysopt.com/forum/smile.gif

[This message has been edited by alan (edited 01-29-2000).]

[scotter]

hey bell1 I'm using proxy+ got it from www.download.com (http://www.download.com) it's free for up to 3 computers it works preaty good is a bit to set up you realy have to read the install and set up papers good but it's free and it works http://www.sysopt.com/forum/smile.gif

[bdog]

Vsocks is also a good free proxy. It runs under 98 nt and 2k. You can get it at tucows. It was really easy to set up.

[Chainsaw]

RobRich,
You done good!
I've been waiting for Steve Gibson's free firewall, I even asked to be e-mailed about it's release. Do ya think this one has some association as U-96 proposes above?
Anyway, thanks!
I have yet to install and test it, but the feedback you are getting here is encouraging.
Thanks once more,
...CHNsaw

~edit~ Installed and tested, locked up tighternadrum! Full Stealth Mode, all ports.
Thanks are in order for sure,
Chainsaw

[This message has been edited by Chainsaw (edited 01-29-2000).]

[jad1097]

socalgal
BID left NetBIOS open. I installed this and it is now closed. A window pops up when you are attacked also(it can be disabled.

I like it better than BID.

[pickel]

Mr. RobRich: I want to express my sincere appreciation for sharing this wonderful and mind easing program. My computer is sealed up tighter than Dick's hatband. Always before the Netbios and port 139 were wide open, now everything is in sealth mode. I hope someday I'll be able to return the favor. Thanks again!!! http://www.sysopt.com/forum/smile.gif http://www.sysopt.com/forum/smile.gif

the pickel

The nice thing about it is that it doesn't seem to take up alot of RAM and doesn't effect browsing speed either. This has kinda made my day.



[This message has been edited by pickel (edited 01-29-2000).]

[bdog]

I just installed it and it seems to be working good. I was wondering how it stands up to Black Ice though. Does anyone who is using it want to give me their ip so that I can run nmap and test it out? I will post the results(less ip) so everyone can see how it stands up against a real portscanner.

[narayan]

Score! Thanks for the link http://www.sysopt.com/forum/smile.gif http://www.sysopt.com/forum/smile.gif

[This message has been edited by narayan (edited 01-29-2000).]

[socalgal]

jad.. is strange. You did have the 'Allow NetBIOS Neighborhood' in configure BID Protection unchecked, right?

I haven't been able to look much up on ZA but from everyone's reaction, sounds like a winner. I'm really happy that something is out that affords protection and is free too.

I hope someone running ZA takes you up on that offer, bdog.

[Vincent22]

Rob,

Wow..this is real cool and not even a pain to set up. Thanks a ton.

Sincerely

Vincent

[R[][]FER]

jad1097...

Is that window you are referring to under:
lock tab/alert messages & you have to check it ?

I did check it and it did pop up on mine.

Is there a way that you can track it down? (IP address).

Also, when you click on the programs tab and hold the cursor over the white box, it gives you info about it...interesting.

~edit: it seems with this box checked, everytime you click on the back button, the window pops up...it is mostly the same two IP #'s but the ports are different. ~end edit

[This message has been edited by R[][]FER (edited 01-29-2000).]

[deep_sky]

i downloaded this cool little program and i have to say that it works quite well, at least according to the the testing available at Steve Gibson's site. I too am on his mailing list, but since this came up, i decided that i was not going to wait and downloaded. i am on a dialup so i am not as vulnerable as a cable or dsl modem user, but i am glad that rob has mentioned this link. once you get the firewall to know what programs to let on the net, it is a breeze.....

[R[][]FER]

bdog...

OK...I'll be a guinea pig if you want http://www.sysopt.com/forum/wink.gif

Just let me know what you want me to do.

And please...No Nuking!!..Ha,ha.

[M1pilot]

Excellent link RobRich! Really nice little firewall program. Just got back from the ShieldsUp test site, and I'm showin' full stealth mode......move over F-117!!!

-M1pilot

[Warped]

Why is this program free? Are the authors just doing it for the betterment of the internet, or are they trying to build a customer base, and charge for upgrades later?

[AuraEdge]

I cant go to the sheilds up testing site...i get a page not found..are there any others?

[shnikey]

This is just what I was looking for a FREE easy to setup firewall. Thanks RobRich.
Shnikey

[pickel]

Aura Edge: Which browser are you using? Sometimes I have to go back to Netscape 4.0
that came iwth my Bellsouth setup software to get into some sites... Just a thought)

the pickel

[U-96]

My only complaint about ZoneAlarm so far it that it doesn't seem to have any obvious logging or threat evaluation... if someone could help me out on that front, I'd be grateful.

I've seemingly had the odd lick from my ISP, but also a couple of others that didn't look so friendly, and had to scribble them on a bit of paper in order to manual whois etc...

U-96

[bdog]

R[][]fer, Just shoot me an email with your ip address and tell me when would be a good time for the "test". I have people coming over today for superbowl and stuff so tommorrow evening would be good for me. If you dont know your ip type wininpcfg at the run line and it will tell. If it is not a static ip you will have to do this right before we do the test so that I scan the right machine.

[R[][]FER]

bdog...

YHM

[CMonster]

Warped - maybe each copy has Back Oriface integrated into it!?

[RobRich]

From my understanding, ZoneLabs is using ZoneAlarm users as a broad base of testers for its underlying technolgoy, inorder to test its functionality for later business and corporate programs that will defintely cost $$$$. Not a bad idea in my opinion. As for futhering info, here's some links:

Steve Gibsons's thoughts:
http://grc.com/zonealarm.htm

GRC discussion of ZoneAlarm and firewall tech:
http://grc.com/su-discussion.htm

ZoneAlarm's Support Service:
mailto:support@zonelabs.com

The support people want all users to email any problems or errors that might arise when using ZoneAlarm, including system config. and actual error display.

Steve Gibson has gave this software a "thumbs up", with a comendation to ZoneLabs. I've been using it with a standard dial-up account, and have seen no adverse effects or slow-downs. I'm defintely keeping this one in my start-up group!

I knew this post migh attract some attention, but this is almost unbelievable.

Robert Richmond

[This message has been edited by RobRich (edited 01-30-2000).]

[lightbringer]

No, I think I read someware that the entire internet industry pours money into this security firm to help with internet security. I think that is how they can give it to the individual for free. Mutli licenses ar enot free so if a business with many pc wanted to use it there is a caost involved. I beleive that is how we can get such a great program for free.

[oxOGradiusOxo]

Maybe it's just me, but I can't access the link at zonelabs.

•g®/-\[)i|_|Š•

[Chaostician]

Umm, the link is bad for me too...

[reddog4629]

I installed this program last night in W2000.
I thought I saw W2000 listed as one of the OS's so I installed it. It worked and all my ports showed stealth then when I re-started
W2000 hung-up tighter than hell. Bout the time it crashed the link crashed too. I'm still trying to resurect W2000. BlackIce was running at the time and I tried to uninstall it-wonder if that was the cause. I thought W2000 was tougher than that. I just saw that RobRich mentioned it was for the W9x environment-Did I screw up or what? http://www.sysopt.com/forum/frown.gif

[This message has been edited by reddog4629 (edited 01-31-2000).]

[reddog4629]

The link is back up and W2000 IS mentioned.
I'm going to write them a letter. http://www.sysopt.com/forum/smile.gif

[RobRich]

From examining its underlying technology, it appears to be best suited for the Win9x enviroment. With Win2k, it almost a toss-up with most programs (some work/some don't?!).

[Chainsaw]

Has anyone noticed that every program that they use ends up in the "Programs" list even if they don't use the modem?
...CHNsaw

[deep_sky]

you would be surprised what attempts to use the modem. chainsaw...i caught winamp trying to logon so i denied it http://www.sysopt.com/forum/smile.gif...you can right click on them and decide from the list what to do with them..remove, allow or disallow basically.

[scotter]

that's becouse it is set up for networking also and it just asumes your computer is networked thats why it list's all the programs that you run

[CujoRbd]

i must tell you... i used ZA for about 2 days... it completely messed up all my configs and stuff that i had in IE and also caused my puter to frequently freeze... i would love to use it again, if they fix the bugs (or if i can figure out how to work around them)...

actually, now that i think about it, i only used the program for about an hour, but i spent the rest of the day and the next trying to work around everything that had gone wrong... i finally just had to uninstall and then cleaned up my registry and stuff....

if someone might know what may have happened, i would like to hear it...


anywayz...

[U-96]

FAO socalgal:

ZA just stopped Go!zilla talking to Aureate. You were right!

U-96

[Andy_L]

Zone Alarm has a new version available for download, supposed to fix some of the bugs.

[Ygor]

I'm downloading that one now, hope they fixed it! I thought it was great right after I installed it, all was in stealth mode and I was a happy camper.
But the next day I could not get out on the web for anything with it running. I played with the settings quite a while before I gave up & downloaded it again. That worked for a while too. But now I can't even come to SysOpt with it on.

Let's hope 3rd try does it.

[socalgal]

U-96 yep... that's why I used GetRight.. the 3.3.4 version. But after buying it, I find I rarely use it now, since getting DSL.

So then guess what happened? GR's updated version (which would be free for me since I paid for the previous) is now linked with Aureate and (I believe) Flycast (?)... Arrrghh! Evil machinations! http://www.sysopt.com/forum/wink.gif

It think it was Deep Sky who pointed that one out. http://www.sysopt.com/forum/wink.gif

[Chainsaw]

deep_sky,
scotter,
Thanks for the feedback, I just need to toy around with it some more, I haven't had any major problems at all, just that the programs showing up (that really isn't even a problem).
It probably thinks I'm on a network, 'cause I am set up as though this is a server to (supposedly) better manage my memory.

Thanks,
...CHNsaw

~edit~ That is sooo... weird, the very second that I finished this thread a message popped up telling me that there is an update for ZoneAlarm. (or ... 'Twilight Zone'Alarm)

[This message has been edited by Chainsaw (edited 02-02-2000).]

[lightbringer]

the newest update has fized the extea porgram problem.

[hoods2]

Hi All: New here as a member, but been reading these boards for a year now. Just have to say this little program works great.
Thanks for all the help the last year and hope to do the same for someone else.
another dave

[U-96]

Anyone notice that ZA informs you of the update, even if you haven't permitted ZA specific internet access in the security settings? Just a thought...

U-96

[Gomer]

Bdog and R[][]fer, did you ever pull off that test of ZoneAlarm, if so what were the results?

[Morpheus1964]

I, too, would be interested to see how that test came out, if it did...

I recently installed the latest version (2.0.26) and it appears to have fixed all the bugs this thread mentioned, as I have had absolutely NO problems with it, and a lot of blocks from inside and out <g> ...

BTW, anyone know what VER_CHK.EXE does?

[Target]

FYI....the newest version is 2.1.7

Finally has some basic logging now too!!

[shadow]

I've been thru several versions of ZA, all but 2.026 have caused my win95 & 98 to frequent the crash and freeze zone. I am sticking with the working version of 2.026 and it works very well on both OS's.
If anyone needs the setup for 2.026, I have it. That version does not have logging unfortunately. And uncheck the box to check for updates at startup no matter what version you have! If you are denied internet access or to your mail server from ZA, shut down ZA and start it back up, that does it for me when it gets in a weird mood.
PW

[quietinthecorner]

While attempting to post this, ZoneAlarm stopped 6 attempts to get into my puter.
Great freebie!! New version does have logging. ver.2.1.7 released yesterday.
Oops,3 more attempts stopped dead.

[R[][]FER]

Gomer & Morpheus...
Yes we did the test and it came thru with flying colors.

[Sweeper]

I use aol to connect via internet. Can't seem to connect? I connect then I can't get to any web pages etc? Says "The firewall has blocked internet access to your computer (TCP Port 1***) from 1**.1**.6.1** (TCP Port 1****). Now I cannot access the internet period.????????????????

[This message has been edited by Sweeper (edited 04-06-2000).]

[AMDClocker]

well i got it about a week ago and i love it also got a proggy from them called optout...it checks for programs sending ad viewing info "like ...etright ...binary boy and a whole lot of others ....thought i was clean ....but NO i had 22 files sending info out " ACK!lol i am on a sdsl line and have worried about security ,i never shut my puter off , but since i got this proggy i have had 2 seperate i.p.s constantly trying to hack my puter ....ivr contacted their isp
and am awaiting there investigation ....so thank god for this program ....its so easy to use to

[jadison]

Unfortunately, Napster won't work with ZA active, I have to disable it before running Napster...btw, are there any other programs that won't run while ZA is active?

This is such a great prog., when I 1st downloaded it, I had about 35-40 attempts on my computer, after 2 weeks I barely get 1 a day, if that!! http://www.sysopt.com/forum/smile.gif

-jd-

[seti]

Napster and ZA co-exsist happily on my computer...I have it set to high. Did you install ZA after Napster? If so try re-installing napster. It seaches for acceptable ports when it installs.

I don't know if this will work though.

[AMDClocker]

i had napster installed first then za they work happily together, and i use about 30 different proggys a day and have yet to find one that dosent work ...also have security set to high .............i run win 98se if that helps