XP SP2 strange firewall problem

Archived from groups: comp.security.firewalls (More info?)

Peter Müller <quitschie59@arcor.de> wrote in news:40823230$0$15503
$9b4e6d93@newsread4.arcor-online.net:

> Installed Win XP SP2. My firewall programm "Steganos Internet
Security"
> is active. Internet only works as long as all access is allowed within
> Steganos. I enabled the Win XP firewall, disabled it, but nothing
helps.
> De-installed steganos, installed it again: same behaviour. As long as
> steganos is filtering (even when I allow every program to access the
> internet) i cannot surf the net.

Maybe, the XP FW is incompatible with the "Steganos Internet Security"
solution. You can have what is known as a double FW situation where
running two FW(s) at the same time will stop traffic on a port.

> It´s strange: Looking in the protocols I found that the rule "block
all"
> is applied when I try to browse, this for port 1900 localy and
> remotely. usually when something is blocked or allowed the program or
> driver name is listed in the protocol, but concerning this blocking
> there just are blanks, so I don´t know which program or driver is being
> blocked. The "block all" rule is NOT activated, just the "normal" rule.
> Only when I activate "allow all" everything is fine (of course)... ???

Maybe, the better solution is to use IPsec to supplement XP's FW that
also has *application control* or the "Steganos Internet Security"
solution.

With the AnalogX SecPol template implemented on the machine, IPsec and
making the rules using the AnalogX template is a simple thing to do.

http://www.petri.co.il/block_ping_ [...] _ipsec.htm
http://www.analogx.com/contents/articles/ipsec.htm

Duane