Best Firewall Options

[Raforever]

Isn't that what Microsoft always says?

[dew7]

that is what is usually said.  You get a bonus when they forward it to Microsoft's Product and Development team.   

[dew7]

Well, clearly my work is starting to annoy people who do not want the Internet to be more safe.  This is good.      I just received a hit from Spain and now from Moscow, Russia.

LOL, I welcome the challenge!

[Yonkey]

What ports are they trying to access you on?

[dew7]

A wide range of ports.  The most popular port hits are port 80 and port 21.

[Yonkey]

Oh, web and FTP.  The FTP one is a direct hack, but the web one might just be some adware.  Do you use any programs that have adware, or visit any sites that use an overbearing amount of banner ads?

[dew7]

I just ran a full check of my computer and I am fine.  I had one little bit of adware a few days ago that I got rid of.  I talked to experts on the Microsoft newsgroup and submitted My Hijack This log for expert analysis altough I was almost sure it was fine.  I run AVG (free), Zone Alarm Professional, Adaware SE, Spybot Search and Destroy, CWShredder, etc. I am almost positive my computer is safe.  I was actually shocked that a small piece of adware did slip through despite my efforts and downloaded the McAfee SiteAdisor to help determine safe sites.  For some reason they have not rated this site yet.

[Yonkey]

Our site shouldn't have any malicious ads (since we design them ourselves ).  But, I can't guarantee people using external avatars.  I have now allowed people to upload directly to our site, so those who were hotlinking no longer need to do so. 

Basically, those sites use a scanning port to determine the IP address of the person viewing their image.  It's invasive and I don't know why they use that particular technique when all they need to do is examine server logs, but oh well. ZoneAlarm blocks it so it doesn't bother me too much.

[dew7]

Can you have people use a less malicious method?

[Yonkey]

I already did my part by allowing people to upload. Now you'll need to do yours by reporting Lycos UK and Tripod to the FBI.

[dew7]

   

Now blocks from Japan but Zone Alarm claims that they were not hostile.
 

Also, JavaScripting is considered more dangerous now because of new Java Scripts that are malicious and can go around firewalls.

http://www.spidynamics.com/news/pr/pr72706.html

[dew7]

Well, I got tired of the constant port scanning so now I have a hardware firewall in my router as well as Zone Alarm Pro.  There was a big discussion about firewalls and if the Windows Firewall was good enough and the general consensus was a multi-layered approach to security is best.  It is great if you are protected by a hardware firewall in your router as well as a software firewall and if you can disable uneeded services to make yourself less vulnerable to attack.  Just my two cents as well as others from the Microsoft newsgroup(s).