You buy it and I'll send it to you.
Otherwise, write your own firewall.
James Grant
Signal 9 Solutions
grant @ signal 9 DOT com
James C. Grant wrote in message <359A34...@cyberus.ca>...
I've been wondering...I see lots of kiddies on IRC boasting about how secure
and "un-nukeable" they are because they are on a firewall (running your
software, pirated in most cases). I've always thought that a firewall was a
(mostly) single purpose machine which gateways traffic between two networks
applying a set of rules and possibly proxies to control data flow. A single
win95 box sitting on the end of a dialup modem doesn't seem like much of a
firewall since it's not firewalling anything. Exactly what is your software
designed to do?
--
Tracy Reed http://www.ultraviolet.org
What's nice about GUI is that you see what you manipulate.
What's bad about GUI is that you can only manipulate what you see.
> I've been wondering...I see lots of kiddies on IRC boasting about how secure
> and "un-nukeable" they are because they are on a firewall (running your
> software, pirated in most cases). I've always thought that a firewall was a
> (mostly) single purpose machine which gateways traffic between two networks
No. Firewall is a program, designed to filter packets. It is often installed
on a router, but can be installed on ANYTHING with a processor and network
interface.
Alex.
So in this case, what are you filtering packets from since the machine is
question is not gatewaying for any other machines? What's the point of a packet
filter when your filtering does not affect what data any machine sends or
receives?
--
Tracy Reed http://www.ultraviolet.org
"One World. One Web. One Program." -- Microsoft hype
"Ein Volk, ein Reich, ein Fuehrer" -- Nazi hype
(One people, one country, one leader)
That is more or less the classical (IT) definition of a firewall.
ConSeal PC FIREWALL can be used in this way, but most use it
to protect one machine. To better describe ConSeal PC FIREWALL,
and for the lack of a better term, Signal 9 Solutions has also
called it a 'personal firewall'.
> A single
> win95 box sitting on the end of a dialup modem doesn't seem like much of a
> firewall since it's not firewalling anything. Exactly what is your software
> designed to do?
While a gateway firewall tries to protect a group of computers,
a 'personal firewall' tries to protect the one computer on which
it runs. As I see it, the job boils down to three essential
functions:
1) Protecting against the weaknesses of the protocols used.
For example, ICMP type 3 (destination unreachable) is
easily spoofed and often abused.
2) Protecting against weaknesses in the implementation of
protocols. For example, a string of fragment attacks
appeared in late 1997 that could crash many operating
systems including Windows 95 and NT. While Microsoft
was scrambling to write and distribute patches, users
of ConSeal PC FIREWALL were already safe.
3) Protecting against unwanted communications.
For example, I don't want my Windows system doing NetBIOS
broadcasts when you dial in to the Internet. Most other
people don't want this either. Also, a personal firewall
can tell you exactly what communication is occuring. Also,
you can block other systems from trying to connect to you.
Also, an open questions to the readers of this newsgroup:
What is the best term for this product, when it is used as
personal protection?
James Grant
Signal 9 Solutions
grant @ signal 9 DOT com
(makers of ConSeal PC FIREWALL)
Alex.
By the time your machine gets to filter the packets, it has already processed
them. The packets reach your machine no matter what. What's the point? And what
sort of additional protection does this get you?
--
Tracy Reed http://www.ultraviolet.org
Ah, I see. Your firewall software appears to remedy weaknesses in the
underlying OS. You are lucky MS is so sloppy. :)
>What is the best term for this product, when it is used as
>personal protection?
I'm not sure, but I doubt it is firewall. I can't think of a unix equivalent to
your software when used in this manner. If there were an equivalent we could
just use the name already associated with it.
ConSeal PC FIREWALL intercepts packets as they come from the device
driver and
before they are passed to the transport protocols, such as Microsoft's
implementation of TCP/IP. At that level, they still have the MAC header
on
them. That is why we can protect the O/S.
> > A single
> > win95 box sitting on the end of a dialup modem doesn't seem like much of a
> > firewall since it's not firewalling anything. Exactly what is your software
> > designed to do?
> ...
> people don't want this either. Also, a personal firewall
> can tell you exactly what communication is occuring. Also,
> you can block other systems from trying to connect to you.
> ...
> What is the best term for this product, when it is used as
> personal protection?
Computer Condom?
- Jeff Younker - je...@mdli.com - These are my opinions, not MDL's - x1498 -
Alex.
>Kiat Siong wrote:
>>
>> where can i find a copy of Conseal PC firewall v1.2 (www.signal9.com)?
>> can anyone send me a copy of it?
>> please send to cki...@tm.net.my
>> thanks in advance :)
>
>You buy it and I'll send it to you.
>Otherwise, write your own firewall.
>
>James Grant
>Signal 9 Solutions
>grant @ signal 9 DOT com
OK, undoubtedly this was the correct response, but the evil part of me
wishes you had just mailed him a trojan horse instead. It would
serve the little pirate right for being dumb enough to post that here.
(Before I get jumped on: I know that doing so would have broken all
sorts of laws, and Mr.Grant would not compromise his reputation or the
reputation of his product by doing such a thing.)