Re: Tiny firewall or Kerio latest?

I would be interested in seeing this issue discussed here on this NG. ABE "MikeT" <[email hidden]> wrote in message news:[email hidden]...

Quoted text (50 lines)

> The latest free personal firewall package from Tiny seems to be a bit > behind the offering from Kerio who I think now own Tiny. My Tiny f/wall > was ver: 2.0. and it seems from what I read had some security issues. > > Snipped below from anothers findings: > > >>Tiny personal firewall for example allows ANY communication > on port 53 UDP outbound, it does not even check if that is > really a DNS request. This is a big security hole that > should be fixed immediatly. > > Note: I also saw that some default settings of ZoneAlarm > have DNS requests enabled or they enable them while using > ZA. I have not tested my trojan with ZA yet, so I dont know > if ZA checks if those requests are valid DNS requests, but > there is a possibility that the hole also affects this > firewall. If anyone finds out if other firewalls are > vulnerable, I would be happy to hear about that. > To test that, simply write a program that connects to > another computer in your network on UDP 53 where you listen > with netcat for example and send a string. If the firewall > doesnt alert this connection, then it is vulnerable.<< > > The latest Kerio version is 2.1.4 dated April 15 2002. > > When installing the Kerio version it will ask you if you want the Tiny > one uninstalled and will grab the persfw.conf file so all your settings > will stay intact. There is a help file included in the Kerio offering > and a pdf manual is on their site too. > > I dont really have much of a clue about setting up rules in firewalls > and rely on the basic settings being good enough, sounds like Tiny are > behind in versions and Kerio have updated to cover more bases. > > I wouldnt mind someone who is well into this sort of thing (I seem to > remember one guy in particular wrote quite a lot on the subject in this > group some months ago) contacting me by email to maybe offer me some > help in setting mine up as I seem to have lots of "any port-any address" > statements in mine and that cant be right. > > Cheers. > > MikeT. > > -- > If you want to email me then use this: > > MikeT at dsl dot pipex dot com > >

>When installing the Kerio version it will ask you if you want the Tiny >one uninstalled and will grab the persfw.conf file so all your settings >will stay intact. MikeT, my experance with Kerio is to remove Tiny completely and do a registry clean as per the Kerio FAQ. Then install Kerio and make all new rules, as the basic rules in 2.1.4 are more beefed up in the ICMP department than Tiny is. So why carry over your weak rule set from tiny? When you are making the new application rules for your internet connections just don't assign an administrator password yet. This will make it easier to create rules especially in games (one less dialog box to deal with). And when you are done creating rules, set your password. You can even set your ports (or range) to those only used by certain games (or any other application). Read the FAQ and instructions on closing out NET BIOS and more at; http://groups.yahoo.com/group/keriofirewall/ More disscussion about Kerio and firewall security can be found at http://grc.com Also load up their newsgroup. Hope this helps. BTW, Kerio 2.1.4 has been working pretty smooth here. (better than the 2 previous release's). -- Daytona Beach - Winter Speed Carnival 1903 - 1935 1919 - Ralph DePalma Driving Champion and winner of hundreds of races, sets new 1 mile record driving 905 cubic inch V-12 Packard on beach at 149.875 mph. DePalma also sets World Records for distances of 2 to 20 miles and standing mile. His standing mile record of 92.713 mph is unbroken for 36 years.