eziptop's dashboard

A comment on the question "Security Suite?" in Sunbelt Software:

I love the firewall. Thanks for taking it over from Kerio.
Please, no suites. No need. Selected separate products is my choice. – eziptop, on April 07, 2009 01:56

eziptop replied on February 25, 2009 00:23 to the question "How to set gateway MAC in the firewall?" in Sunbelt Software:

Please tell me how "Eziptop, Most of the time people can more securely limit what connects to the local network. "

eziptop replied on February 25, 2009 00:20 to the problem "A "Trial version has expired" window has started appearing after login into my windows" in Sunbelt Software:

Havran, and HOW MUCH did you PAY for this software????

Get real, face the facts, and give up so we, paying customers, don't have to pay for you as well.

eziptop replied on February 24, 2009 02:02 to the problem "A "Trial version has expired" window has started appearing after login into my windows" in Sunbelt Software:

Just a user here confirming the observations listed above.
The buyme nag appears on each windows startup, on each firewall startup (if not started by windows), on each entry into the Web shield tab and on each click of the HIPS button as these are not in the free version. And the installation date indeed is always your first encounter with this firewall. It's all a nuisance BUT understandable, to me, with a free version. Though I wish it wasn't like that :)
You have to live with it or buy, It's a great firewall, worth the few dollars.

eziptop replied on February 24, 2009 01:54 to the question "How to set gateway MAC in the firewall?" in Sunbelt Software:

Your answer seems to imply an inherent level of insecurity in the Sunbelt firewall. If I permit, in the packet rules and the trusted area, certain ins and outs for my own LAN at home, these persmissions will carry over to an unknown network of the same 192.x.x.x range if the MAC address of the router is not enforced. Am I wrong? If so, please explain me more. Thanks in advance for an answer.

eziptop replied on February 24, 2009 01:50 to the problem "gmer.exe found" in Sunbelt Software:

gmer.exe is clean unless you got some malware infected version.
it's the best thing since sliced bread.
keep it.
Not only it can detect rootkits, it can log every process starting.

eziptop replied on February 17, 2009 21:09 to the question "When and how we update IDS rules" in Sunbelt Software:

Ok, I guess.

OT: I hope it won't get bloated silly big, as it already has features I don't need (hips, web checking) and wish they didn't even load in. The trend with other companies is to make it bigger and bigger and bigger. I hope Sunbelt resists that trend.

eziptop asked a question in Sunbelt Software on February 17, 2009 20:59:

How to set gateway MAC in the firewall?

Let's say I have a router with a typical address 192.168.0.1 and it issues me an IP address.
LAN, including my router are trusted in the firewall. If I go to a neighbor's house with similar router (192.168.0.1), what prevents the firewall from automatically assuming it is a trusted network, when in fact I may want it to be untrusted or asked if to trust. I see not place to set the MAC address of my router.

eziptop replied on February 17, 2009 20:56 to the question "When and how we update IDS rules" in Sunbelt Software:

That's exactly what I see. October. I thought rules update often. So it takes a whole version update to update the IDS rules? Is that how it's supposed to be?

eziptop replied on February 17, 2009 20:54 to the question "Please clarify Internal Network rules in the 4.6.1861 user guide" in Sunbelt Software:

Ok, thanks. Makes sense. It was not clear to me that you included this item as well.

eziptop replied on February 17, 2009 01:56 to the question "When and how we update IDS rules" in Sunbelt Software:

I see this sort of thing in the warning.log
UpdateManager.cpp: Updater address resolving failed: (11004) The requested name is valid and was found in the database, but it does not have the correct associated data being resolved for..

and this in the error.log
Config.cpp: GUI #11: CTQuery::SendQuery: error database access denied, query = UPDATE Http SET EnableHttp=1

any relation?

eziptop replied on February 17, 2009 01:16 to the question "Please clarify Internal Network rules in the 4.6.1861 user guide" in Sunbelt Software:

1-ok
3-I understand what you're telling me and I understand loopback, localhost connections etc. It'just that I don't thing the pdf file says what is really happening. Hey, fire up your comp, don't bother going to the wild wicked web, and look at the connections tab. Or look at connections for both services using ProcessExplorer. Tell me where am I misreading what the pdf says.

eziptop replied on February 17, 2009 01:12 to the question "When and how we update IDS rules" in Sunbelt Software:

Dates in the programfiles\sunbelt...\IDS directory

eziptop replied on February 16, 2009 21:48 to the question "Please clarify Internal Network rules in the 4.6.1861 user guide" in Sunbelt Software:

2,4 ok, thanks
1. Let me rephrase the question. The only services I see are sbPFsvc and sbPFcl. Are they the same as spf4ss and spf4gui under different names?
3. What I see in the first table is tcp/udp, incoming to localPoint=LocalHost:44334 from remotepoint=localHost:ANYport.
Then in the second table, GUI, outgoing by TCP/UDP from LocalHost:AnyPort to remote LocalHost:44334, also to remote LocalHost:AnyPort.
The Connections tab seem to confirm how I see it, but maybe not. So what's going on?

eziptop replied on February 16, 2009 21:46 to the question "When and how we update IDS rules" in Sunbelt Software:

Grateful for no unnecessary popups, but don't IDS rules need a change in 4 months out there on the wild web? I really don't know, just asking to learn. Automatic update is about product version?

eziptop gave praise in Sunbelt Software on February 16, 2009 04:39:

Love this firewall!!

I just love this firewall.
Fast user switching works. File sharing on the LAN works. Making packet rules from alerts is a breeze on one dialog window. All rules are laid out on one screen.
Thank you Sunbelt for keeping the ease of use and simplicity of Kerio 2.1.5 :)

eziptop asked a question in Sunbelt Software on February 16, 2009 04:35:

Please clarify Internal Network rules in the 4.6.1861 user guide

on page 8-2 is an interesting list of those rules. Four questions
1. What is spf4ss.exe and spf4fui.exe? I see SbPFsvc.exe and SbPFcl.exe
2. What is sbLaunch.exe (not in this chapter, but what is it for)
3. See First table - With remote adm.disabled, it says spf4ss.exe (I assume this is the service), it says incoming by TCP/UDP From remote port 44334. The connections tab seems to indicate incoming from localHost:any port TO local 44334, so should not the Remote say "any"?
4. On page 8-3 under Logging it says that Any application allowed out by tCP to localHost:44501. Is it really ANY app?

eziptop asked a question in Sunbelt Software on February 16, 2009 04:21:

When and how we update IDS rules

Installed in October '08. I haven't seen any IDS rules updates. Do they occur? How often? and yes, I do have Automatic update enabled and the FW does call home every startup.