Article on DoomJuice virus mentions something cool?

I think it's talking about ad aware.

 

Most software-based firewalls already do this and have been for a few years now. ZoneAlarm is free and does it. Norton's Personal Firewall isn't free and does it. There are others out there.

 

Zone Alarm is an example of software that will identify which apps are trying to access the Internet. After you load Zone alarm whenever you launch a program that tries to talk to the net (web browser, IM, e-mail, etc...) it will ask you if you're okay with this program talking with the Net. If so, it lets the program "out" and doesn't prompt you again about that program.

If you get a trojan or worm that tries to secretly communicate to the Internet, Zone Alarm should alert you and give you the opportunity to deny that trojan permission to communicate outwards. Of course, you have to realize that it's a "bad" program trying to talk outbound! If you give every program that asks permission to the Net you've defeated ZA's purpose.

Basic (and I mean basic!) Internet security with a broadband connection should consist of three elements:

1. A NAT router - this will prevent random scans from getting to your internal network and, therefore, your computers. If you have DSL or cable this is really a must have in my opinion. (NAT lets packets that originate from you LAN out and reply packets back in. However, it won't let packets that originate from the NET into your network by default)

2. Anti-virus/anti-spyware software - A NAT router may stop people who try to get inside your network but it won't stop YOU from downloading and installing software either by opening e-mail attachments, by hitting malicious web sites or by downloading files via WinMX, etc.... Hopefully if you download something evil anti-virus software will catch it. Hopefully.

3. Some kind of personal firewall like Zone Alarm that looks for programs that try to secretly access the Internet - once again, a NAT router will prevent people on the outside from getting in, but if you load something unknowingly that tries to communicate outbound, NAT won't stop it. That's where Zone Alarm comes into play. If you DO get some kind of trojan or worm on your PC, hopefully ZA will detect it when it tries to communicate outbound so you can deny it permission.

There is no ONE thing that will secure your computers. You need to impliment a security principle called "Depth of Defense" which basically means having several things in place that, on their own, don't offer complete security but combined make it difficult for crackers to comprimise your systems. The three things I have outlined here should be considered "basic" and should be combined with other, common sense things like strong passwords and good judgement with regard to what you do (or download) on the net.

 

another vote for Zone Alarm!

and they have a basic free version ANYONE can download (if you have PC)

 

are there any Internet Security Software packages that support 2k3 Server? you would figure Symantec or McAffee would have a product but they dont. Tried ZoneAlarm but no luck, now just waiting on a response from BlackIce.

 

They have it but good luck affording it for your personal use.

Symantec Enterprise Security

 

The term "firewall" gets thrown around a lot but actually anything that stands between you and the public Internet can be considered a "firewall". A simple NAT router is a firewall - just not a very full-featured one. A good hardware firewall will let you configure what traffic is allowed inbound and let you configure what traffic is allowed outbound as well as some sort of intrusion detection system to alert you if any well-known attacks are being directed against you.

Of course, good firewalls aren't cheap! Which is why people go the NAT router/Zone Alarm route.

 

As far as personal software firewalls are concerned, here's a vote for <a href="http://soho.sygate.com/buy/download_buy.htm">Sygate Personal Firewall</a>. Regular version is free.

 

Agreed. Good firewall for free.