Free Windows firewalls

From Wikipedia, the free encyclopedia

 This article or section is written like an advertisement.
Please help rewrite this article from a neutral point of view.
Mark blatant advertising which would require a fundamental rewrite in order to become encyclopedic for speedy deletion, using {{db-spam}}. (May 2008)
This article may require cleanup to meet Wikipedia's quality standards.
Please improve this article if you can. (May 2007)

Contents

[edit] Isafer

Isafer
Isafer

Isafer offers a GUI for adding and removing allowed and denied applications, it also allows the user to block or allow connections based on their IP or port (or IP range or port range). It also offers a simple port scanner that scans for open ports in order to detect malware, but that feature is rather limited because of the existence of reverse connections.
Isafer is licensed under the GPL.

[edit] External links

[edit] TDI FireWall

TDI FireWall is a firewall for the Windows NT4/2000/XP/2003 operating systems.
Its' configuration is based on a config file (C:\winNT\system32\drivers\etc\tdifw.conf) that is a text file where the configuration is stored, and must be edited by hand.
It is possible to define :

  • The protocol (TCP, UDP, RawIP)
  • The port
  • the source ip address
  • the destination ip address
  • The program that request a connection

TDI FireWall is licenced under the BSD License.

Here's an example of a config file:

[_signature_]
_signature_=$tdi_fw$

[_config_]
;** Authorised events logs System32\LogFile\stdifw ****
eventlog_allow=0
;** Denided Events Logs in the event logger ******
eventlog_deny=1
;** Logs of the errors in the event loger ************
eventlog_error=1

[_main_]
;** Authorise by default the following rules ********************
_default_=network localhost

;** Authorise FileZilla for evrything*********************************
;C:\Program Files\FileZilla\filezilla.exe=allow_all
;** Authorise Firefox for evrything *********************
;C:\Program Files\Mozilla Firefox\firefox.exe=allow_all

[_users_]
_default_=*
NT AUTHORITY\SYSTEM=*

[_hosts_]
ALL=0.0.0.0/0
NETGRAY=192.168.0.0/24
NETELOYES=10.0.0.0/8
LOCALHOST=127.0.0.1

;** Rules for the local network neighbourhood *****************************
[network]
netgray: ALLOW * * FROM ALL TO NETGRAY NOLOG
neteloyes: ALLOW * * FROM ALL TO NETELOYES NOLOG
broadcast: ALLOW UDP OUT FROM ALL TO 255.255.255.255 NOLOG

;** Rule that allows connection to localhost ***********
[localhost]
localhost: ALLOW * * FROM ALL TO LOCALHOST NOLOG

;** Rule that allows every connection !!! ***************************
[allow_all]

allowall: ALLOW  * * FROM ALL TO ALL

;** Rule that forbids every connection !!! ***************************
[deny_all]
denyall: DENY  * * FROM ALL TO ALL

[edit] External links

[edit] WIPFW

WIPFW is a port of the FreeBSD ipfirewall under windows. Its' license is the BSD License. It still doesn't have all the capacities of the FreeBSD firewall but does have the following capabilities:

  • stateless and statefull filtering
  • accounting
  • logging
  • filtering by protocol(IP, ICMP, TCP, UDP, ...)
  • Dynamic filtering rules

Its configuration can be done via a text file or via a Graphical User Interface like qtfw for windows

[edit] External links

[edit] Core force

Core Force is a free personal firewall that incorporates modules for the control of processes (it is what is commonly referred to as a HIPS, acronym of Host Intrusion Prevention System). The software allows the user to control incoming and outgoing packets, as well as the behavior of programs: the permissions to read, write, execute, and delete files, and the permissions to read, write, and delete registry keys can be constantly monitored and/or limited.

Core Force's declared goal is to guarantee security characteristics that make it possible to protect from malware, trojans and external attacks that use 0-day exploits or that take advantage of weaknesses in the operating system and in the software in use.

See main article: core_force