et pourquoi ce choix ? En Avez-vous testé plusieurs ?

nan que ZA simple rapide efficace et interface intuitive et paremetrable facilement

pourkoi foutre un firewall alors que winroute lite planque très bien les ports ?
 
bande de parano

Neowatch ... je ne sais pas ce qu'il vaut en matière de sécurité par rapport aux autres, mais il est très convivial.

winroute repond toujours aux requete des scan alors que firewall ne le fait pas winroute avec ca tu n'est pas à l'abris des attaque de type DOS

alors que ZA ,ne le fait pas fallait comprendre

Aucun Fire wall Soft n'est vraiment bon ......
 
 
Mais le mieux , c Black ice , et Zone Alarme PRO  

un test pour etre fait sur https://grc.com/x/ne.dll?bh0bkyd2
Il te dira si tes ports sont ouvert, fermé ou tout simplement invisible (meilleur solution)

 
au secours !!! j'vais me faire attaquer par un W@rLorDzzzz
 
non, sérieux fo arreter avec ces histoires de firewall...
si vous voulez vous amuser, faites en des vrais mais pas avec des trucs comme ZA ou Black Ice...

la meilleure solution, c l'anti-virus mis à jour régulièrement !

vla le test avec winroute lite:
 
Attempting connection to your computer. . .  
Shields UP! is now attempting to contact the Hidden Internet Server within your PC. It is likely that no one has told you that your own personal computer may now be functioning as an Internet Server with neither your knowledge nor your permission. And that it may be serving up all or many of your personal files for reading, writing, modification and even deletion by anyone, anywhere, on the Internet!  
 Your Internet port 139 does not appear to exist!  
One or more ports on this system are operating in FULL STEALTH MODE! Standard Internet behavior requires port connection attempts to be answered with a success or refusal response. Therefore, only an attempt to connect to a nonexistent computer results in no response of either kind. But YOUR computer has DELIBERATELY CHOSEN NOT TO RESPOND (that's very cool!) which represents advanced computer and port stealthing capabilities. A machine configured in this fashion is well hardened to Internet NetBIOS attack and intrusion.  
 Unable to connect with NetBIOS to your computer.
All attempts to get any information from your computer have FAILED. (This is very uncommon for a Windows networking-based PC.) Relative to vulnerabilities from Windows networking, this computer appears to be VERY SECURE since it is NOT exposing ANY of its internal NetBIOS networking protocol over the Internet.

J'aime bien norton personal firewall, parce qu'il me bouffe presque pas de ressources et qu'il me bloque les bannières de pub, ce qui accélère mon surf. Zone alarm est peut-être meilleur, côté sécurité, mais il faisait ramer ma bécanne grave- c,est fou ce qu'il bouffe comme ressources, ce goinfre! Pour ceux qui aiment blackice, sachez que ce con de firewall n'empêche même pas les trojans de se connecter sur internet, donc, quel intérêt? Il contrôle peut-être ce qui veut entrer, mais il contrôle pas ce qui veut sortir... Si vous ne me croyez pas, essayez le leaktest à http://www.grc.com .

vla la suite :
 
Port  
Service  
Status Security Implications  
 
21  
FTP  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
23  
Telnet  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
25  
SMTP  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
79  
Finger  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
80  
HTTP  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
110  
POP3  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
113  
IDENT  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
135  
RPC  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
139  
Net
BIOS  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
143  
IMAP  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
443  
HTTPS  
Closed Your computer has responded that this port exists but is currently closed to connections.  
 
445  
MSFT
DS  
Closed Your computer has responded that this port exists but is currently closed to connections.

ben de tte facon on sait toujours quand on met un firewall ca a un effet psychologik....

satan a écrit a écrit : pourkoi foutre un firewall alors que winroute lite planque très bien les ports ?   bande de parano

Clair, l'utilité d'un firewal est limité sur un post individuel qui n'est pas branché sur un réseau, et qui est correctement configuré. Je garde le mien seulement parce qu'il me bloque les bannières de pub efficacement et qu'il bouffe pas de ressources, pratiquement.

http://www.hackerwhacker.com:4000/ [...] r=firewall
 
essayer celui si ...
 
Il fait 3 test...
 
avec ZA Pro , 4 vulnerabilites dans 2 des 3 tests... avec Sygate 0...

pour winroute lite : 0 au 1er, 3 au 2e (2 pour netbios), o au 3e (netbios) donc en réalité il y a juste le port pour le provider

le firewall de winxp me suffit. J ai voté autres

sygate 0 prob je confirme et puis lui au - ne fais pas planter xp

pour le test de grc, j'ai tout qui est sauf et l'autre tourne toujours depuis 20 minutes et il a déja fait 2221 essais.
 
Pourtant j'ai aucun firewall ni winroute. Comme quoi, la paranoia...

J'ai AtGuard qui me bloque la pub en même temps

[edtdd]--Message édité par altus--[/edtdd]

bon, ben le deuxième test vient de se terminer et j'ai tout bon dans les 4 parties.

aucun firewall, meme pas d'antivirus.
et je vais sur les sites de warez, juste protégé par un proxy http, qui filtre la merde. (la pub)

lorsque zone alarm donne une adresse ip ça veut dire que l'"attaque" vient de là on peut remonter à cette adresse ou pas ?

seulement au vu de vos resultats de test, vos ports sont fermes (closed) mais pas invisibles...
et l'interet du firewall est la, si un mec scanne votre ip il aura comme reponse qu'il n'y a pas de reponse.. ce qui au niveau securité est bien meilleur qu'une machine qui repond present...
 
et pour tester sa securité, le site de Sygate est plus pointu que celui de GRC
 
http://scan.sygatetech.com/prequickscan.html  (la c'est pour un scan rapide mais il y a moyen d'en faire des plus poussés (tous les ports TCP et UDP)

zone alarm pro et .... You have No Vulnerabilities
 
un firewall soft ce configure  

Le meilleur des firewall ne vaut rien si il est mal configuré !

_2K_ a écrit a écrit :   zone alarm pro et .... You have No Vulnerabilities   un firewall soft ce configure

 
vu que j'ai le même résultat sans firewall, c'est pas trop compliqué...
 
alf73>> l'intéret de ne pas répondre, c'est surtout en cas d'attaque type DOS, car les demandes sont plus vité gérées, mais dans le cas d'un firewall soft sur une connexion adsl, ca n'a absolument aucun impact.

 
Closed seulement !

 
Faux, j'ai un reseau derriere mon PC qui est Firewallé, si j'ose dire.

Y a pas la case:  
"pas de firewal, c'est chiant et je suis pas parano"

http://www.hackerwhacker.com:4000/ [...] r=firewall  
 
Starting Test: #1
Description: Scan for open ports (showing ports)
Target Scanned: 217.136.154.198
Starting Time: Sun Nov 25 15:18:25 2001  
The SYN scan took 2224 seconds to scan 1711 ports.
Port State Protocol Service
Of the ports searched, none were found open.
 
Starting Test: #2
Description: Netbios Name Table
Target Scanned: 217.136.154.198
Starting Time: Sun Nov 25 15:55:29 2001  
This test will check to see if you have given Windows File Sharing access of your hard drive to the entire world. If so, we'll show you your "netbios name table", your share list and if possible a small sample of files off your own hard drive.  
 
Needless to say, if your files show up here assume you have had them completely exposed since you last changed settings on your Windows Network settings.  
 
 
No Netbios Information Available. SAFE.
 
Starting Test: #3
Description: Check common SMTP vulnerabilities
Target Scanned: 217.136.154.198
Starting Time: Sun Nov 25 15:55:54 2001  
 
SMTP Whacker copyright (c) 1999 by Hacker Whacker
 
Attempting to contact SMTP (E-Mail) Server at 217.136.154.198...
 
Test Finished at Sun Nov 25 15:56:55 2001, Duration 1 minutes 1 seconds
 
Starting Test: #4
Description: Check Common Web Server Vulnerabilities
Target Scanned: 217.136.154.198
Starting Time: Sun Nov 25 15:56:55 2001  
CGI Whacker Copyright(c) 1999 by Hacker Whacker
Inspecting Host=217.136.154.198
No Web Server Found at 217.136.154.198
Test Finished at Sun Nov 25 16:10:05 2001, Duration 13 minutes 10 seconds
 
 
 
http://scan.sygatetech.com/quickscan.html
 
You have blocked all of our probes! We still recommend running this test both with
and without Secure Desktop enabled... so turn it off and try the test again.  
 
 
www.grc.com
 
 
Port  
Service  
Status Security Implications  
 
21  
FTP  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
23  
Telnet  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
25  
SMTP  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
79  
Finger  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
80  
HTTP  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
110  
POP3  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
113  
IDENT  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
135  
RPC  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
139  
Net
BIOS  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
143  
IMAP  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
443  
HTTPS  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!  
 
445  
MSFT
DS  
Stealth! There is NO EVIDENCE WHATSOEVER that a port (or even any computer) exists at this IP address!

 
hmmm pas tres convaincant le scan de sygate.
apres un test rapide il me dit  
Service  Ports  Status  Additional Information  
FTP DATA 20 BLOCKED Used by FTP for data transmission in Passive mode.  
FTP 21 BLOCKED File Transfer Protocol is used to transfer files between computers. A misconfigured FTP server can allow an attacker to transfer files, trojan horses, and virus programs at will.  
SSH 22 BLOCKED Secure Shell, a encrypted type of telnet. If misconfigured it can allow for brute-force attacks on your administration account.  
TELNET 23 BLOCKED Telnet is used to remotely create a shell (dos prompt), this can allow an attacker to control your system as if he was sitting in front of it.  
SMTP 25 BLOCKED SMTP is used to send email acrost the internet. This allows an attacker to verify user accounts on your system, send anonymous (spam) email, or even access files on your hard drive.  
DNS 53 BLOCKED Domain Name Services are used to resolve host names to IP addresses.  
DDC 59 BLOCKED Used mainly by file transfer and chat programs.  
FINGER 79 BLOCKED Finger offers information about who is currently logged in to your computer.  
WEB 80 BLOCKED HTTP web services publish web pages. A misconfigured web server can not only offer an attacker needed information about his target, but it can allow for various security breaches.  
POP3 110 BLOCKED Post Office Protocol is used to receive email. It can be used by attackers to create fake email addresses, execute programs, and even intercept your private email.  
IDENT 113 BLOCKED Ident is often used for IRC (chat), but also provides information about your system and who is using it.  
NetBIOS 139 BLOCKED NetBios is used to share files through your Network Neighborhood. If you are connected to the internet with this open, you could be sharing your whole hard drive with the world! This is a very dangerous port to have open.  
HTTPS 443  Secure Web Servers are often used by banks and online vendors.  
Server Message Block 445  In Windows 2000, Microsoft added the possibility to run SMB directly over TCP/IP, without the extra layer of NBT.  
SOCKS PROXY 1080  Socks Proxy is an internet proxy service, many IRC servers will not allow you to log in if you are running an unsecured socks proxy.  
WEB PROXY 8080  HTTP Web Proxy allows other people to bounce their web browser off of your computer to fake their real IP address to web servers.  
 
Results from scan of commonly used trojans at TCP/IP address: 193.252.108.78
 
Service  Ports  Status  Possible Trojans  
Trojan 1243 BLOCKED BackDoor-G, SubSeven, SubSeven Apocalypse  
Trojan 1999 BLOCKED BackDoor, TtansScout  
Trojan 6776 BLOCKED BackDoor-G, SubSeven  
Trojan 7789 BLOCKED Back Door Setup, ICKiller  
Trojan 12345 BLOCKED GabanBus, NetBus, Pie Bill Gates, X-bill  
Trojan 31337 BLOCKED Baron Night, BO client, BO2, Bo Facil, BackFire, Back Orifice, DeepBO  
Trojan 54320 BLOCKED Back Orifice 2000  
Trojan 54321 BLOCKED School Bus, Back Orifice 2000  
 
Results from scan of ICMP at TCP/IP address: 193.252.108.78
 
 
Protocol  Type  Status  Additional Information  
ICMP  8  OPEN ICMP ping request. ICMP is used to "ping" your machine in order to test internet access  
 
dommage , mais j'ai un serveur ftp (21) , un serveur web (80) et un MySql (3306) qui tournent sur ma machine et le scan me dit que ces ports ne repondent pas....
c'est sur que si il repond ca a tt le monde on est tous bien proteges.
tenez au fait il dit que je suis visible au ping.
bizarre , ca par contre c'est a verifier, je vous invite a le faire

moi j ai un sonicwall (firewall hard.)

 
Une machine dédié rien qu'a ca ? Ca fonctionne comment ?

A part Firewall, il fait server DHCP, NAT, VPN, ANtivirus,  le tout est paramétrable par un navigateur.
un ptit lien :
http://www.sonicwall.com/products/soho/index.html
 
http://www.sonicwall.com/products/demo/index.html

[edtdd]--Message édité par lololo--[/edtdd]

 
Ca coute cher cette petite merveille ?

moi, j'utilise mon routeur.

un petit firewall hard :
http://www.sonicwall.com/products/tele/index.html
 
ça marche un peut comme un firewall soft mais en amont, et un seul suffit pour plusieurs pc.

Environ 5-6000F pour le petit tele2.
Je rappel que c'est equipé d'un vrai processeur,
et ça peut firewaller (si ça se dit..) 90Mbps/s
Et meme encrypter/decrypter en 3DES a 2Mbps (pour encrypter/decrypter plus rapidement en 3DES il faut un modele supperieur)
 
certains encryptent en ssl directement pour les serveurs web.
 
[moua]