Windows XP firewall

Archived from groups: comp.security.firewalls (More info?)

"Norm" <ntaer@earthlink.net> wrote in newsvtxc.26430$Tn6.23603
@newsread1.news.pas.earthlink.net:

> How does the built -in xp firewall compare with the others?
>
>
>

It's just as good as the others when stopping unsolicited inbound
traffic.

http://support.microsoft.com/defau [...] #appliesto
http://www.petri.co.il/block_ping_ [...] _ipsec.htm
http://www.analogx.com/contents/articles/ipsec.htm

If you need to stop outbound behind XP's ICF, then IPsec will do it,
which can be used to supplement any host based FW.

The AnalogX Secpol file when implemented provides a solid and simple set-
up to learn from.

You can use Active Ports (free) to watch inbound and outbound
connections.

Duane

Archived from groups: comp.security.firewalls (More info?)

"Dave" <Dave@please.keep.replies.in.the.newsgroup> wrote in
news:Chxxc.1298$uB3.1160@news-server.bigpond.net.au:

>>
>> > How does the built -in xp firewall compare with the others?
>> >
>> >
>> >
>>
>> It's just as good as the others when stopping unsolicited inbound
>> traffic.
>>
>
> But only after it's started.
>
> XP SP1+ has a nasty little quirk, in that the firewall may start after
> the network service is up. This gives you some unprotected time.
>
> XP SP2, due in the next few months, is supposed to fix this.
>

From what I have seen in doing a litle testing in this area, it doesn't
seem like a whole lot of these PFW(s) can get on the TCP/IP either at
boot.

Duane