The Definitive "BEST FIREWALL" thread

[MxxCon]

i'm so sick of these threads poping up every single week. so here's the one and only thread you should need untill the end of your life. moderator can modify poll entries to update.

BEST FIREWALL

[ootput]

Hardware firewalls are of course the best setup. However...

I currently use BlackICE. But when Iused to run a chat server that would get SYN flooded and Frag'd to death on a daily basis, I installed everything from BlackICE Server Ed - ZoneAlarm Pro and about 10 others inbetween. I have to admit that 8Signs Firewall was the BEST by far at detecting when a SYN attacks were going to happen, successfully block it, as well as allow me to apply rules to still allow traffic to flow that should be permited. The overhead to the CPU was extreamly low as well. However, the down side is that its not all for the novice user. But when you getting DoS, SYN, and Fragmented File attacks, its in my opinion, the best software defence. For you Win2k users consider editing your regitry to accomidate for SYN attacks as well; it does help.

No outbound though. :( Personally, I still think that it offers the best inbound protection.

[Slimy]

i don't like za cuz it slows down other programs/games including file transfer, freezing some

nis04 is way too bloated, too many processes, uninstall it and see the difference on your pc booting up

mcafee just sux

and microsoft is aimed at with everything so the built in firewall is risky

[zxvf]

Well if u are using Zone alaram security suite... then try zone alaram Pro... cos zone alaram security suite has anitvirus in it and it is eating up most of the memory....

i think nothing beats zone alarm pro...

[Slimy]

it's the firewall that slows down my other apps

really annoying

i lag like crazy in ut2004

and downloading clients either go really slow or just freeze

i'm switching but it's hard to choose

[furiorc]

I would recommend using either iptables (linux 2.2, 2.4 and 2.6) or pf (openbsd, that is a really slick firewall :)), if you have a old computer lying somewhere doing no good :)

[stockwiz]

Anyone ever try look n stop? I was browing through sites looking for firewall comparisons and came upon this site here...

http://www.firewall-net.com/tools/firewall...=looknstop&l=en

which gave an extremely high review to this firewall which is about the fastest I've ever used thus far.. extremely small yet seemingly powerful.

http://www.looknstop.com/

Here are claims from their website... this is my first day using it but so far I'm impressed.

Why does Look 'n' Stop make the difference ?

Look 'n' Stop has no identified bug and is very stable.

Look 'n' Stop is downloadable in a few seconds (480 kB only)

Look 'n' Stop can be installed in only one click.

Look 'n' Stop provides a double filtering at Application and Internet levels.

Look 'n' Stop can either be immediately be used by beginners with its default rule-set or be infinitely configured by advanced users.

Look 'n' Stop protects a PC against Trojan programs.

Look 'n' Stop protects a PC against executable file masquerading.

Look 'n' Stop allows to log and analyze any data packet, like a sniffer, including an anti-flood protection

Look 'n' Stop controls both input and output data flows.

Look 'n' Stop is compatible with ICS (Internet Connection Sharing) and A0L.

Look 'n' Stop allows to share Internet filtering rules through import and export.

Look 'n' Stop does not slow PC performances and Internet connection bandwidth.

Look 'n' Stop allows to select the network adaptor on which filtering applies.

Look 'n' Stop supports all Ethernet protocols like IP, ARP and others.

Look 'n' Stop filtering rules can work at Ethernet MAC address level.

Look 'n' Stop includes who-is and trace-route protocols that allow to identify an attack.

Look 'n' Stop includes a password protection.

Look 'n' Stop filters outbound TCP connections like Code Red attacks

Look 'n' Stop includes a Stateful Packet Inspection.

Look 'n' Stop allows to diplay the history of all TCP connections.

Look 'n' Stop is available in English, French, German and Italian.

Look 'n' Stop is available for just $39

[Tikimotel]

Using Linux firewall/router distro "Smoothwall Express"

more info : http://www.smoothwall.org/

it's running on a P3 450Mhz on a Abit 440BX mainboard, 320MB ram, 9Gig HDD, 2x Realtek 100Mbit cards all connected to a Baystack 350 24port Switch for the home network. (up and running 1 year and counting)

[darkhooda]

lock this already, it's going to become so long and eventually become a flame war

[cyclingplatypus]

lock this already, it's going to become so long and eventually become a flame war

What are you talking about this thread was originally started May 30, 2002 if it hasn't started a flame war by now chances are pretty good that it won't. :D By the way welcome to neowin. :D

[hot_wired13]

smoothwall is good, i wont disagree on that. but its getting abit commercialised.. the free version is abit too.. er, what should i call it - fixed.

i'd rather make my own with freebsd ipfw and stuff my own monitoring and ids stuff (go snort!) on it... seems more flexible for me.. or rather, my network...

[Slimy]

currently using outpost

i like it

[tristan.oneil]

Not sure if i've already posted here before but the best firewall IMO is my netgear router, I don't like software firewalls.

[5kong]

IMO kerio 2.1.5 is the best. It has small size, almost the least resource occupation, great stability, powerful settings, and it's totally free to individual use.

[mistical]

IMO kerio 2.1.5 is the best. It has small size, almost the least resource occupation, stable, powerful, and free.

Have you experienced any problems with it though? slowness? try tracerting neowin and see if it is normal. Because yesterday I uninstalled kerio after having it for 2 days due to problems with the firewall, I now have Zone Alarm Pro 4.5 and my tracert is fine. I am not trying to put kerio down, I love its interface and I love using new things, just experienced problems with it... all default settings.

[5kong]

@ mistical : I have never experienced problems with it, in about 3 years. P2P, ftp, http, q3, etc, everything is fine. Try this LINK, maybe it could give u some help.

[mistical]

@ mistical : I have never experienced problems with it, in about 3 years. P2P, ftp, http, q3, etc, everything is fine. Try this LINK, maybe it could give u some help.

I have 1 computer with Kerio still on it, everything else with zone alarm pro 4.5, I will try out the information at this link on that, and see if I want to switch back, I mean I still have a great firewall now that I switched over too, but I love playing with new things, and not just being stuck on 1 thing :p

Thanks :)

[Kobra]

SMC Barricade, hardware firewall! Best firewall around, and $39.. :D

[paganinio]

Norton Internet Security is the most famous i guess, even more famous than Windows built-in firewall(i didn't know Windows has any Firewall built in)

1 year ago i installed NIS trail version and now it's still on my harddisk...

[Jonny_C]

first hardware firewall

then router firewall

then fw-1

then one more for clients.

[qqqqllll]

Zonealarm is my best love!!!

[Ollie64]

I hate these "what's the best type of ..." theads when people just reply with the software they have installed without any qualifying argument as to why it's the best.

To know what is best you have to have experience with other contenders in the same catagory. What use is someone just replying "ZoneAlarm 5 Pro" ? Why is that better than the rest ?

I use the Windows SP2 firewall but I don't know if it's the best so I didn't take part in the poll. This thread hasn't helped much because it's turned into a poll of what is the most popular and not neccessarily what's best.

[Rogue`]

hehe, I was about to start a new topic asking for sugestions on what Firewall I should use, but I thought it'd be a good idea to use the search function first lol....and it would appear "Use ZoneAlarm its teh win!!!!!" would be the main answer I would of got, so I dont think i'll bother :)

I'm testing out ZoneAlarm (free) atm, seems pretty cool so far :)

I think i might just end up investing in a router with a hardware firewall, they seem to get allot of good praise :)

[firewalltester]

pcinternet patrol although it's not free.. there is a 7 day trial

http://www.pcinternetpatrol.com/products/

it's the best one i've seen yet. every program is check by experts and determind malicious or not. so nothing gets through unless checked.

heres some quotes

pcInternet Patrol? will pick it up where the Anti-Virus and Firewall fail. It will detect new and unknown malicious programs even if it exists in a single copy on a single computer.

pcInternet Patrol? is a unique real-time program authentication system driven by patent-pending technology and human intelligence. You will have no rules to set, no security classes to attend, just straightforward "honest to goodness" protection 24/7.

[BrutalFluid]

Is it possible for me to get a trial of zone alarm pro?

[metallithrax]

Is it possible for me to get a trial of zone alarm pro?

585788157[/snapback]

Yes when you download zonealarm it gives you an option to run as a trial, when you have installed it.

I use Zonealarm free.

Edited April 17, 2005 by metallithrax