Firewall (WRT54GC V.2) leaking???
I've been using Smoothwall as a centralized firewall without any problems and it has worked flawlessly. I do use client firewalls to control outbound traffic and check the logs of those firewalls as a regular basis - and they do not indicate any inbound traffic.
I established a network (one wireless client and one wired client) around WRT54GC v.2 with client firewalls. The firewall of WRT54GC is, of course, enabled and I have most positively not opened any ports.
I have been quite surprised to see that the client firewalls log hits from remote addresses quite often, for example a hit from 194:***.**.* port **** to the port 1264 in 192.168.100. Quite confusing. Doesn't the Linksys firewall block/drop all inbound traffic as default? :?
By default the linksys is supposed to block all incoming traffic.
However if you are getting a lot of hit's on a particular port , i'd suggest that you forward those ports for a non-existant IP on the network.
Similar Messages
-
So I'm trying to give FTP access to a web share that a website is hosted from. I tried connecting with Filezilla and it says it cannot establish a connection to an sFTP server with FTP.
So I tried FTP, and it says authentication failed.
BUT, it doesn't fail when I log in with my admin account that I use to administer the server.
I checked the permissions of the folder, the share, and the FTP, and they all allow the user I want to access it in, but it still fails.The morass known as ftp is older than the internet, the protocol is problematic around modern network components including firewalls, and the implementation is wildly insecure. Put another way, it's hard to get working, it tends to be sensitive to any firewall changes, and it leaks your passwords in cleartext.
To allow access via ftp, turn off all intervening firewalls, either at the client and firewalls in front of the client, or at the server and firewalls in front of the server, or better — both. (That's not usually an option, of course, but that's the world that ftp was built for.) You could get a firewall that can sniff the ftp traffic and detect the secondary link the protocol opens and open the port, or that triggers on ftp traffic and opens the whole port range. Or you could open the whole of the ephemeral port range, or whatever secondary port range ftp is configured to use.
Here's how to get ftp going on OS X, and here's why you might not want to; some details on the protocol processing, the direction of the connections, the ephemeral ports, and related details.
Local preference is sftp; to configure and use that for access into the web server. sftp shares three letters with ftp and its general purpose, but is otherwise a completely different and vastly more modern and much more secure transfer mechanism. sftp operates atop the ssh protocol, which will have to be enabled on the target system; enabling ssh enables both ssh and sftp, and a few other tools that can use the ssh protocol. It's encrypted. And You can also set up site-local certificate-based logins with ssh and sftp, so the users either have a passphrase and a certificate, or a no-password login and a certificate if you want that; certificates are basically gonzo passwords.
Filezilla and Cyberduck can both use sftp for GUI users, and there are command line tools that are part of OS X and OS X Server. -
WRT54GC v2.0 - UDP Traffic issue
Hi, i've bought last week the wireless router WRT54GC v2.0 and it works good for normal navigation, port forwarding, wireless signal, ecc...
I've only a problem, a big problem, it can't handle high UDP traffic, this issue can be experienced, e.g. with Kad network of eMule. I can connect to Kad and i'm not firewalled, but if i try to search something, the search results are always empty or almost empty. If i made the same search connecting with my ISP router it works fine.
I tried with both wireless and wired connection from WRT54GC and the result is the same, so it's not a wireless problem. I tried to disable firewall, playing with settings, using DMZ o port triggering. The result was the same. I've updated the firmware to version 1.01.0 too.
Is there a solution for this problem??
Sorry for my english
Message Edited by RedKite on 08-31-2008 02:39 AMI am not sure about the workwround ... however you can try filtering the UDP packets that are incoming .....
-
WRT54GC 100Mbps wired gives 37Mbps
I may be missing something obvious here for which I apologise in advance, but I've searched through these forums and the technical specifications for the WRT54GC router as far as I can understand them, and I'm still not sure why I'm getting the results I have.
I'm living in South Korea and have a 100Mbps connection in my apartment with LG Powercom, my ISP. When I connect my computer directly to the Internet I get upload and download speeds of approximately 93Mbps when testing a 100 megabyte transfer against LG's servers - which equals around 11.6MB/s.
http://img215.imageshack.us/img215/9938/internetnorouterfp6.png
However, when I connect through the router (wired, not wirelessly), the speed is consistently around 38Mbps, or 4.8MB/s. The test results hold true for external download tests.
http://img215.imageshack.us/img215/6310/internetrouterxm3.png
I understand that the wireless speed is 54Mbps (802.11g) but I thought the router should be capable of 100Mbps wired (100Base-TX). I know I'll never actually reach 100 in reality but I'm losing 50Mbps connecting through the router. I upgraded it to the latest version of the firmware (v1.05.7), but the results are consistent on the two computers I have running through the router.
Have I misunderstood the router's capabilities and is it limited to a maximum of 54Mbps both wirelessly and wired, and 38Mbps is about what I could reasonably expect when wired? Also, if I am stuck at 38Mbps, could anyone recommend a wired or wireless router than can actually manage 100Mbps wired?With the WRT54GC router, only the switch is designed to run at 10/100 speeds. So if you did a file transfer across your LAN, from one wired computer to another wired computer, you would get a 100 Mbps connection, and a data transfer rate of about 93 Mbps, which is about the limit for a 100 Mbps wired connection.
On the other hand, data passing through the Internet port of the WRT54GC must be processed by the router (which is a small computer). The incoming data must pass through the router's firewall, get port forwarded (if this feature is used), get linked to the correct computer, and then must be directed to the appropriate wired port or out the wireless. All this takes router processing power. The bottom line is that it won't run at 100 Mbps.
When I checked on your router, its maximum speed (Intenet port to wired LAN port) is rated at 47 Mbps, only a little more than the 38 Mbps that you reported.
You should also be aware that a 54 Mbps wireless connection will not transfer data at 54 Mbps. Under ideal lab conditions (read: not in your home) it can do about 25 Mbps of data transfer. Most home users are lucky to get 10 Mbps of data transfer.
To get the higher router speeds that you crave, you will need to buy one of the newer, and more expensive routers, such as the WRT350N or the WRT600N. According to one web site I checked, these models have a (WAN port to wired LAN port) speed of over 150 Mbps. For fast wireless speed, you will also need a wireless n adapter. This ideally will give you a wireless connection of 270 to 300 Mbps, and a wireless data transfer speed of 20 to 70 Mbps.
Hope this helps.
Message Edited by toomanydonuts on 02-05-2008 12:22 AM -
SDM Error when Configuring Firewall on 851
SDM V2.3.2 gives me an error when generating the Firewall for an 851. How do I get past this error?
Hi Mike,
It seems hat this pppoe error is not critical. According to the following Software Defect Report, some images do not give the user access to that command:
CSCsq83872 - Memory Leak seen while unconfiguring pppoe
(BTW, your IOS image has the fix for the above problem)
Also, you are saying that your Internet is up, so the PPPoE piece seems to be fine.
At this point, I would recommened that you open a TAC case so we can look at this issue in more detail:
http://www.cisco.com/tac/caseopen
Once you have the case number, please send it to me so I can track it. After the engineer provides you with the solution, I will post on the forum.
Thanks,
Marcos -
WRT54GC will not give wireless clients IP addresses
Hi, I'm here on a behalf of a friend. I'm working on a WRT54GC wireless router. The issue is that any wireless client wishing to connect to the router (after seeing the SSID) always fail at "Waiting for network" during the connection screen. However, wired clients are able to connect without any problems. I have updated the firmware to the latest one. No security features (WEP/WPA) are enabled. I have tried changing the channel and mode to no avail. MAC address filter is disabled. Wireless card drivers are up to date. I'd like to know what can be done to resolve this issue. Thanks in advance. -Keres
In the non-working computer, temporarily turn off the software firewall, including Windows Firewall, and see it this helps.
Also, give your network a unique SSID. Do not use "linksys". If you are using "linksys" you may be trying to connect to your neighbor's router. Also set "SSID Broadcast" to "enabled". This will help your computer find and lock on to your router's signal.
If you still have trouble, in the computer, go to the wireless adapter software, and go to "Preferred Networks" (sometimes called "Profiles" ), and delete all the networks you find. Reboot computer. Then return to "Preferred Networks" and re-enter your unique network SSID, and set it to "automatic login". Reboot computer. You should connect automatically.
If the above does not fix your problem, download and install the latest driver for your wireless card. -
WRT54GC Router showing more then one network
My WRT54GC has been shutting down my internet. When I look at available networks on my computer it shows one secure and one unsecured. When I enter a wep key to get in the network it creates another one so I have Linksy secure network when I access it it creates Linksy secure network 1, 2 etc. It does the same with the one it shows as unsecured. I talk to my ISP and they said my internet is out of range and shuts down. Any ideas on how to fix this?
ThanksFirst of all, in the router, give your network a new unique SSID. Do not use your old SSID. Do not use "linksys". If you are using "linksys" you may be trying to connect to your neighbor's router. Also set "SSID Broadcast" to "enabled". This will help your computer find and lock on to your router's signal.
Next, in the computer, go to your wireless software, and go to "Preferred Networks" (sometimes called "Profiles" ). There are probably a few networks listed. Delete any network named "linksys". Delete any networks with your old SSID. Also delete any network that you do not recognize, or that you no longer use. Reboot computer. Return to "Preferred Networks" and enter your new network info (the new SSID, encryption (if any), and key (if any) ). Then select your new network and make it your default network, and set it to automatic login. You may need to go to "settings" to do this, or you may need to right click on your network and select "Properties" or "settings". Reboot computer. Your computer should connect automatically to your router (it can take up to 2 minutes). If you still have trouble, temporarily turn off your computer software firewall and try again to connect.
If the above does not fix your problem, download and install the latest driver for your wireless adapter.
Some users have reported improved wireless performance by switching from WEP to WPA encryption.
Also note:
For WEP, enter WEP "key 1" (found in the router) into your computer, not the WEP password or passphrase.
For WPA or WPA2, enter the key (sometimes called password or passphrase) into your computer.
If you are able to connect to your new SSID, but you still see your old SSID listed in "available networks", then your old SSID is either from your neighbor using the same SSID, or it is simply a "ghost" listing (caused by your wireless adapter software) which is not real and which will disappear in a few days.
Message Edited by toomanydonuts on 12-29-2009 03:44 AM -
WRT54GC - problems with eMac on network
I just got the WRT54GC router, and I'm using several computers on my home network:
router - 192.168.1.1
eMac - static IP - 192.168.1.7 - wired
WinXP 1 - DHCP - 192.168.1.102 - wired
WinXP 2 - DHCP - 192.168.1.103 - wireless
Win2k 1 - static IP - 192.168.1.4 - wireless
Win2k 2 - DHCP - 192.168.1.105 - wireless
The problem I'm having is with the eMac. It can ping the router, it can ping the WinXP 1 wired machine, but it can't ping any of the wireless machines. Likewise, none of the wireless machines can ping the eMac. However, if I load up iTunes on a wireless machine, it can see that there is a music share available, but it gets an error when it tries connecting to the share. I can access the eMac's music share from the WinXP1 wired machine, no problem.
I've tried pinging machines from the router, as well, and the router can ping every machine on the network without a problem.
So it seems to me like something is blocking the access between the eMac and all the wireless machines on the network. The WinXP 1 wired machine can access all the wireless machines, it's just the eMac that's having the problem. I've made sure the OSX Tiger firewall is turned off.
The firmware version on this router is 1.02.5.
Any ideas?Try swapping the cables around.
Try switching the ports each computer is plugged into.
If the Mac is plugged into port 1 on the router, make sure DMZ is turned off.
Pan
I am not responsible or liable for any problems my suggestions may cause. Use at your own risk. -
We have a web application that is currently depending on Application Module Pooling.
Our production system is configured with PIIX to enforce a multiple DMZ model. The ocj4 instance serving our application is in one DMZ and the data base server is in another. PIIX is configured to disable connections between firewalls that are idle for 30 minutes. Over time, JDBC connections leak (50 to 60 a day). It looks like when the fire wall disables a connection that is being referenced by an application module that has been idle for 30 minute, that application module is getting a new connection to service without returning the disabled connection to the OS.
Would we set the jbo.maxpoolcookieage property of the Application Module to less than 30 minutes to avoid the JDBC connection leaks? If not, how can we configure the application module so that disabled JDBC connections are returned to the operating system if the connection has been timeout out by the firewall software?
Thanks in advance.My thought is that your firewall feature is completely
at odds with connection pooling.
Doesn't it stand to reason that a conn will be idle when
your app is idle?
On the other hand, you might be able to use J2EE (OC4J)
conn pooling and tune the closing the idle connection in
data-sources.xml and set min conns to zero. This way
you might get the container to close all conns and you'll
leak no idle conns.
I don't think AM pooling with nailed up conns or using
BC4J's conn pooling will time out idle conns as will
the J2EE container.
Search this forum on data-source.xml and I posted definative
how-to configure datasource connection configuration and
tuning.
BTW, doing this, will make first users of your app sluggish
as they pay the cost of new connections. ;-(
Good luck.
curt -
Firefox extension is blasting me with reports of leaking
I noticed Firefox is becoming a huge memory hog, taking up over 300 MB of memory or more and sometimes my CPU is working over 50%. I installed an extension for checking for leaks, Leak Monitor 0.4.5 and restarted Firefox. And wham, pretty much every page I go to I get a cascade of notification windows of leaks, with one box having like a summary of them. And the page will continue to leak as long as I am there.
Here is a copy of the summary from a couple of run throughs, I finally had to disable the extension because I am spending all my time closing out leak notification windows.
Leaks in window 0x3449e80:
[+] [leaked object] (9c1abe0) = [XULElement]
[ ] querySelector (8ee8b60) = [Function]
[ ] querySelectorAll (8ee8b98) = [Function]
[ ] baseURI = true
[ ] textContent = true
[ ] compareDocumentPosition (8ee8cb0) = [Function]
[ ] getUserData (8ee8ce8) = [Function]
[ ] isSameNode (8ee8d20) = [Function]
[ ] lookupNamespaceURI (8ee8d58) = [Function]
[ ] setUserData (8ee8d90) = [Function]
[ ] lookupPrefix (8ee8dc8) = [Function]
[ ] isDefaultNamespace (8ee8e00) = [Function]
[ ] isEqualNode (8ee8e38) = [Function]
[ ] dispatchEvent (8ee8e70) = [Function]
[ ] removeEventListener (8ee8ea8) = [Function]
[ ] scrollWidth = true
[ ] clientLeft = true
[ ] clientHeight = true
[ ] clientWidth = true
[ ] clientTop = true
[ ] getClientRects (8ee8bd0) = [Function]
[ ] getBoundingClientRect (8ee8c08) = [Function]
[ ] getElementsByClassName (8ee8c40) = [Function]
[ ] mozMatchesSelector (8ee8c78) = [Function]
[ ] tagName = true
[ ] removeAttributeNS (8ee8ee0) = [Function]
[ ] removeAttribute (8ee8f18) = [Function]
[ ] getAttribute (8ee8f50) = [Function]
[ ] getElementsByTagName (90bb000) = [Function]
[ ] setAttribute (90bb038) = [Function]
[ ] getElementsByTagNameNS (90bb070) = [Function]
[ ] hasAttributeNS (90bb0a8) = [Function]
[ ] setAttributeNS (90bb0e0) = [Function]
[ ] hasAttribute (90bb118) = [Function]
[ ] getAttributeNS (90bb150) = [Function]
[ ] nextSibling = true
[ ] firstChild = true
[ ] prefix = true
[ ] nodeValue = true
[ ] childNodes = true
[ ] nodeName = true
[ ] namespaceURI = true
[ ] previousSibling = true
[ ] nodeType = true
[ ] localName = true
[ ] lastChild = true
[ ] ownerDocument = true
[ ] parentNode = true
[ ] attributes = true
[ ] appendChild (90bb188) = [Function]
[ ] cloneNode (90bb1c0) = [Function]
[ ] normalize (90bb1f8) = [Function]
[ ] hasChildNodes (90bb230) = [Function]
[ ] insertBefore (90bb268) = [Function]
[ ] replaceChild (90bb2a0) = [Function]
[ ] removeChild (90bb2d8) = [Function]
[ ] hasAttributes (90bb310) = [Function]
[ ] querySelector (8ee8b60) = [Function]
[ ] querySelectorAll (8ee8b98) = [Function]
[ ] style = true
[ ] scrollWidth = true
[ ] clientLeft = true
[ ] clientHeight = true
[ ] clientWidth = true
[ ] clientTop = true
[ ] getClientRects (8ee8bd0) = [Function]
[ ] getBoundingClientRect (8ee8c08) = [Function]
[ ] getElementsByClassName (8ee8c40) = [Function]
[ ] mozMatchesSelector (8ee8c78) = [Function]
[ ] baseURI = true
[ ] textContent = true
[ ] compareDocumentPosition (8ee8cb0) = [Function]
[ ] getUserData (8ee8ce8) = [Function]
[ ] isSameNode (8ee8d20) = [Function]
[ ] lookupNamespaceURI (8ee8d58) = [Function]
[ ] setUserData (8ee8d90) = [Function]
[ ] lookupPrefix (8ee8dc8) = [Function]
[ ] isDefaultNamespace (8ee8e00) = [Function]
[ ] isEqualNode (8ee8e38) = [Function]
[ ] dispatchEvent (8ee8e70) = [Function]
[ ] removeEventListener (8ee8ea8) = [Function]
[ ] tagName = true
[ ] removeAttributeNS (8ee8ee0) = [Function]
[ ] removeAttribute (8ee8f18) = [Function]
[ ] getAttribute (8ee8f50) = [Function]
[ ] getElementsByTagName (90bb000) = [Function]
[ ] setAttribute (90bb038) = [Function]
[ ] getElementsByTagNameNS (90bb070) = [Function]
[ ] hasAttributeNS (90bb0a8) = [Function]
[ ] setAttributeNS (90bb0e0) = [Function]
[ ] hasAttribute (90bb118) = [Function]
[ ] getAttributeNS (90bb150) = [Function]
[ ] nextSibling = true
[ ] firstChild = true
[ ] prefix = true
[ ] nodeValue = true
[ ] childNodes = true
[ ] nodeName = true
[ ] namespaceURI = true
[ ] previousSibling = true
[ ] nodeType = true
[ ] localName = true
[ ] lastChild = true
[ ] ownerDocument = true
[ ] parentNode = true
[ ] attributes = true
[ ] appendChild (90bb188) = [Function]
[ ] cloneNode (90bb1c0) = [Function]
[ ] normalize (90bb1f8) = [Function]
[ ] hasChildNodes (90bb230) = [Function]
[ ] insertBefore (90bb268) = [Function]
[ ] replaceChild (90bb2a0) = [Function]
[ ] removeChild (90bb2d8) = [Function]
[ ] hasAttributes (90bb310) = [Function]
[ ] ordinal = true
[ ] controllers = true
[ ] boxObject = true
[ ] getElementsByAttribute (9c3b8c0) = [Function]
[ ] hidden = true
[ ] addEventListener (90d6f18) = [Function]
[+] [leaked object] (9c1ac20) = [XULElement]
[ ] querySelector (8ee8b60) = [Function]
[ ] querySelectorAll (8ee8b98) = [Function]
[ ] baseURI = true
[ ] textContent = true
[ ] compareDocumentPosition (8ee8cb0) = [Function]
[ ] getUserData (8ee8ce8) = [Function]
[ ] isSameNode (8ee8d20) = [Function]
[ ] lookupNamespaceURI (8ee8d58) = [Function]
[ ] setUserData (8ee8d90) = [Function]
[ ] lookupPrefix (8ee8dc8) = [Function]
[ ] isDefaultNamespace (8ee8e00) = [Function]
[ ] isEqualNode (8ee8e38) = [Function]
[ ] dispatchEvent (8ee8e70) = [Function]
[ ] removeEventListener (8ee8ea8) = [Function]
[ ] scrollWidth = true
[ ] clientLeft = true
[ ] clientHeight = true
[ ] clientWidth = true
[ ] clientTop = true
[ ] getClientRects (8ee8bd0) = [Function]
[ ] getBoundingClientRect (8ee8c08) = [Function]
[ ] getElementsByClassName (8ee8c40) = [Function]
[ ] mozMatchesSelector (8ee8c78) = [Function]
[ ] tagName = true
[ ] removeAttributeNS (8ee8ee0) = [Function]
[ ] removeAttribute (8ee8f18) = [Function]
[ ] getAttribute (8ee8f50) = [Function]
[ ] getElementsByTagName (90bb000) = [Function]
[ ] setAttribute (90bb038) = [Function]
[ ] getElementsByTagNameNS (90bb070) = [Function]
[ ] hasAttributeNS (90bb0a8) = [Function]
[ ] setAttributeNS (90bb0e0) = [Function]
[ ] hasAttribute (90bb118) = [Function]
[ ] getAttributeNS (90bb150) = [Function]
[ ] nextSibling = true
[ ] firstChild = true
[ ] prefix = true
[ ] nodeValue = true
[ ] childNodes = true
[ ] nodeName = true
[ ] namespaceURI = true
[ ] previousSibling = true
[ ] nodeType = true
[ ] localName = true
[ ] lastChild = true
[ ] ownerDocument = true
[ ] parentNode = true
[ ] attributes = true
[ ] appendChild (90bb188) = [Function]
[ ] cloneNode (90bb1c0) = [Function]
[ ] normalize (90bb1f8) = [Function]
[ ] hasChildNodes (90bb230) = [Function]
[ ] insertBefore (90bb268) = [Function]
[ ] replaceChild (90bb2a0) = [Function]
[ ] removeChild (90bb2d8) = [Function]
[ ] hasAttributes (90bb310) = [Function]
[ ] querySelector (8ee8b60) = [Function]
[ ] querySelectorAll (8ee8b98) = [Function]
[ ] style = true
[ ] scrollWidth = true
[ ] clientLeft = true
[ ] clientHeight = true
[ ] clientWidth = true
[ ] clientTop = true
[ ] getClientRects (8ee8bd0) = [Function]
[ ] getBoundingClientRect (8ee8c08) = [Function]
[ ] getElementsByClassName (8ee8c40) = [Function]
[ ] mozMatchesSelector (8ee8c78) = [Function]
[ ] baseURI = true
[ ] textContent = true
[ ] compareDocumentPosition (8ee8cb0) = [Function]
[ ] getUserData (8ee8ce8) = [Function]
[ ] isSameNode (8ee8d20) = [Function]
[ ] lookupNamespaceURI (8ee8d58) = [Function]
[ ] setUserData (8ee8d90) = [Function]
[ ] lookupPrefix (8ee8dc8) = [Function]
[ ] isDefaultNamespace (8ee8e00) = [Function]
[ ] isEqualNode (8ee8e38) = [Function]
[ ] dispatchEvent (8ee8e70) = [Function]
[ ] removeEventListener (8ee8ea8) = [Function]
[ ] tagName = true
[ ] removeAttributeNS (8ee8ee0) = [Function]
[ ] removeAttribute (8ee8f18) = [Function]
[ ] getAttribute (8ee8f50) = [Function]
[ ] getElementsByTagName (90bb000) = [Function]
[ ] setAttribute (90bb038) = [Function]
[ ] getElementsByTagNameNS (90bb070) = [Function]
[ ] hasAttributeNS (90bb0a8) = [Function]
[ ] setAttributeNS (90bb0e0) = [Function]
[ ] hasAttribute (90bb118) = [Function]
[ ] getAttributeNS (90bb150) = [Function]
[ ] nextSibling = true
[ ] firstChild = true
[ ] prefix = true
[ ] nodeValue = true
[ ] childNodes = true
[ ] nodeName = true
[ ] namespaceURI = true
[ ] previousSibling = true
[ ] nodeType = true
[ ] localName = true
[ ] lastChild = true
[ ] ownerDocument = true
[ ] parentNode = true
[ ] attributes = true
[ ] appendChild (90bb188) = [Function]
[ ] cloneNode (90bb1c0) = [Function]
[ ] normalize (90bb1f8) = [Function]
[ ] hasChildNodes (90bb230) = [Function]
[ ] insertBefore (90bb268) = [Function]
[ ] replaceChild (90bb2a0) = [Function]
[ ] removeChild (90bb2d8) = [Function]
[ ] hasAttributes (90bb310) = [Function]
[ ] ordinal = true
[ ] controllers = true
[ ] boxObject = true
[ ] getElementsByAttribute (9c3b8c0) = [Function]
[ ] hidden = true
[ ] addEventListener (90d6ee0) = [Function]
Correction, this form would only let me post about one run through. I have pages more if anyone wants me to send them. ThanksHello.
Issues of this sort are, unfortunately, more common and the we'd like them to be. However, they tend not to be cause by Firefox itself, but rather by software that is running either inside or alongside it, such as add-ons or firewalls. Since these issues have a broad span of possible causes, you need to diagnose your problems before fixing them. Follow these instructions ''to the line'', as they'll probably help you diagnose and fix the problems you're having.
#run Firefox in [http://support.mozilla.com/en-US/kb/Safe+Mode safe-mode] to disable all extensions, themes and plugins. If this fixes your problem, be it with RAM or CPU usage, then you know it's a problem with add-ons (plugins, themes or extensions). Proceed to number 2. If safe-mode doesn't fix your problem, then read bellow, after this list;
#update all extensions (go into ''Tools > Add-ons > Extensions > Find Updates''), themes and plugins (see [https://www.mozilla.com/en-US/plugincheck/ this page] in your Firefox. If this doesn't solve the issues, proceed to the following number;
#disable all extensions, themes and plugins in your Firefox (not running safe-mode). This is temporary and for diagnostic purposes only. Being certain that, as in safe-mode, the problems you're having have gone away, enable one plugin at a time. You should be certain that you actually want that plugin to be enabled. It's best to keep the overall number of enabled plugins as low as possible. When you encounter problems, you know you've found a problematic plugin, so disable it for good. Keep enabling all plugins (except problematic ones) until you've gone through them all. If you need support for a problematic plugin, you need to contact its author for support;
#enable one extension at a time. Again, be certain that you actually want that extension to be enabled. As with plguins, it's best to keep the overall number of enabled extensions as low as possible. Also, try the theme you want to have installed so see if that is what's causing the problem. When you encounter problems, you know you've found a problematic extension/theme, so disable it for good. Keep enabling all your extensions (except problematic ones) until you've gone through them all. Just the same as with plugins, if you need support for a problematic extension/plugin, you need to contact its author;
#if you've followed my instructions above, you're done! You've fixed your problems with problematic add-ons. If you want to keep using those problematic add-ons, please contant their authors for support.
Ok, now... ''If'' disabling all extensions and plugins through safe-mode didn't work to fix your problems (or, in other words, if you've just read number 1 on the list above and come straight here), then you have different issue. The most likely scenario is that you have a third party software running on your computer that is messing with Firefox. Detecting which program it is may be tricky, but the following list should help you. Make sure you follow it carefully. Don't forget to answer the question on the last point, if nothing else helps.
#try reinstalling Firefox. No data will be lost. You can get the latest version (for free, as always) at [http://www.getfirefox.com/ getfirefox.com]. Make sure you [http://support.mozilla.com/en-US/kb/Uninstalling+Firefox uninstall Firefox] prior to reinstalling it. For help installing Firefox, see [https://support.mozilla.com/en-US/kb/Installing+Firefox this support article]. If that doesn't fix the problem, proceed;
#do a virus/malware check on your computer. See [https://support.mozilla.com/en-US/kb/Is+my+Firefox+problem+a+result+of+malware?s=malware&as=s this support article] for help on this point. ''This is a very important step'', so please pay attention to it. If your problem is not due to viruses/malware, proceed;
#disable all software running in the background that you don't want to have running in the background (in Windows operating systems, this is done by pressing WINDOWS+R in your keyboard, typing ''msconfig'' and pressing Enter; now, under the ''Startup'' tab, you can uncheck the software you don't want, and reboot your system for changes to take effect; if you're unsure of what software you want running, ask someone with more experience). If this doesn't fix your issues with Firefox, proceed;
#check if your firewall/antivirus/security suite is conflicting in any way with Firefox's normal behavior. Check for enabled functions/features that you don't want and/or may be causing problems with Firefox. You'll find that these features are most likely tied to Internet Security features, such as link scanners or URL checkers and the like. If you're not sure they are conflicting with Firefox, simply try to disable them temporarily to see whether or not that's true. If this doesn't solve the issues, proceed to the following number;
#check your operating system security options, mainly advanced options that are not configured by default. While it's very unlikely that this may be the cause of the problem, it's remotely possible. If this doesn't work, proceed to the following point;
#update your modem/router software. There have been some reports that some modem/router software may cause Firefox and other browsers to loose performance and/or stability. If updating doesn't fix your issue, try other versions of the software, if possible. If you need support with this, contact your modem/router manufacturer. If this doesn't help, proceed;
#if you are using a Windows operating system, clean up your OS registry using appropriate software. There have been reports that badly maintained Windows Registries may case problems with Firefox. If this doesn't help, see the following point;
#please try creating a new temporary Firefox profile ([http://support.mozilla.com/en-US/kb/Managing+profiles managing profiles]) and see if the issues persist. Please report the results, so we can help you further. -
Management server access through firewall
I'm trying to use the memory leak detector with a server in our data canter. The firewall only allows communication on certain ports and I've set -Djrockit.managementserver.port to use one of them.
The initial connection (RMI registry lookup) from the client works fine, but then the client tries to connect back to an "anonymous" (random) port that the RMI (mgmt) server listens at.
Is there a way to specify which port the actual mgmt server listens at? (I've also tried -Dcom.sun.management.jmxremote.port, but that didn't help either)
We'd like to avoid having to open ports for each newly establish connection.
Thanks!The JMX Management Server is only used to start up the native Memory Leak Server. The call to start up the Memory Leak Server returns an anonymous port over wich all further communication with the Memory Leak Server takes place.
This is not a technical constraint though; it just reflects the way the client is currently written. I'll make sure the next version of the MemoryLeak Detector client supports a user specified port for the communication with the Memory Leak Server - at the very least through a system property.
Contact me at hirt(at)bea.com if this is something you need right away. ;)
Kind regards,
Marcus -
I'm just starting to learn about route leaking today, so I'm still trying to figure this out.
In short, I've created three vlans and put them in a vrf and would like them to access the internet. At this point, I have vrf created, vlans assigned and a global route leaked from the vrf to the gateway of last resort. A machine in the vrf is able to ping all three vlan gateways, but cannot still get to the internet.
I have everything on a 6509 core switch, and my firewall is an ASA 5505. I've also tried putting routing configs in using eigrp, but the vrf networks never made it to the ASA. Attached are my configs on both. If anyone could help me with what I'm missing that would be great. Thanks!
**** 6509 Config ****
lab-core6509#sh run
Building configuration...
Current configuration : 22128 bytes
! Last configuration change at 17:31:43 pst Tue Jan 7 2014 by rmf
! NVRAM config last updated at 12:30:19 pst Tue Jan 7 2014 by rmf
upgrade fpd auto
version 12.2
no service pad
service tcp-keepalives-in
service tcp-keepalives-out
service timestamps debug datetime msec localtime show-timezone
service timestamps log datetime msec localtime show-timezone
no service password-encryption
service sequence-numbers
service counters max age 5
hostname lab-core6509
boot-start-marker
boot system flash disk0:s72033-ipservicesk9_wan-mz.122-33.SXI.bin
boot-end-marker
aaa new-model
aaa authentication login default local
aaa authorization exec default local
aaa session-id common
clock timezone pst -8
clock summer-time PDT recurring
clock calendar-valid
ip subnet-zero
ip dhcp excluded-address 192.168.80.1 192.168.80.9
ip dhcp pool 192.168.80.0/24
network 192.168.80.0 255.255.255.0
default-router 192.168.80.1
domain-name procopio-guest.com
dns-server 8.8.8.8
ip vrf bingfish
rd 123:1
ip domain-name company.local
mls ip slb purge global
mls netflow interface
no mls flow ip
no mls flow ipv6
mls cef error action reset
spanning-tree mode pvst
diagnostic bootup level minimal
diagnostic cns publish cisco.cns.device.diag_results
diagnostic cns subscribe cisco.cns.device.diag_commands
fabric timer 15
redundancy
main-cpu
auto-sync running-config
mode sso
vlan internal allocation policy ascending
vlan access-log ratelimit 2000
interface Port-channel10
switchport
switchport trunk encapsulation dot1q
switchport mode trunk
interface GigabitEthernet1/1
switchport
switchport access vlan 500
switchport mode access
spanning-tree portfast edge
~SNIP~ (I don't think anyone cares about all the interface configs!)
interface Vlan510
description voice server net
ip address 10.90.10.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan666
ip address 10.90.253.1 255.255.255.0
interface Vlan851
description bingfish client net
ip vrf forwarding bingfish
ip address 10.249.1.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan852
description bingfish server net
ip vrf forwarding bingfish
ip address 10.249.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan853
description bingfish management net
ip vrf forwarding bingfish
ip address 10.249.3.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan901
description guest network
ip address 192.168.80.1 255.255.255.0
ip access-group guest-net in
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan912
description internet perimeter
ip address 10.91.2.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
interface Vlan999
description management net
ip address 10.90.100.1 255.255.255.0
no ip redirects
no ip unreachables
no ip proxy-arp
no ip mroute-cache
router eigrp 200
network 10.0.0.0
address-family ipv4 vrf bingfish
autonomous-system 99
network 10.249.1.0 0.0.0.255
network 10.249.2.0 0.0.0.255
network 10.249.3.0 0.0.0.255
redistribute static metric 10000 100 255 1 1500
exit-address-family
ip classless
ip route 0.0.0.0 0.0.0.0 10.91.1.2
ip route vrf bingfish 0.0.0.0 0.0.0.0 10.91.1.2 global
no ip http server
no ip http secure-server
ip access-list extended guest-net
deny ip any 10.0.0.0 0.255.255.255
permit ip any any
control-plane
dial-peer cor custom
line con 0
exec-timeout 30 0
line vty 0 4
exec-timeout 30 0
line vty 5 15
exec-timeout 30 0
ntp logging
ntp authenticate
ntp trusted-key 10
ntp clock-period 17179851
ntp source Vlan500
ntp master
ntp server 10.90.1.50 prefer
end
**** ASA 5505 Config ****
lab-5505asa# sh run
: Saved
ASA Version 8.2(5)
hostname lab-5505asa
domain-name company.local
names
dns-guard
interface Ethernet0/0
description inside
interface Ethernet0/1
description outside
switchport access vlan 2
interface Ethernet0/2
description dmz
switchport access vlan 4
speed 100
duplex full
interface Ethernet0/3
interface Ethernet0/4
interface Ethernet0/5
interface Ethernet0/6
interface Ethernet0/7
interface Vlan1
nameif inside
security-level 100
ip address 10.91.1.2 255.255.255.0
ospf cost 10
interface Vlan2
nameif outside
security-level 0
ip address <outside ip> 255.255.255.128
ospf cost 10
interface Vlan4
nameif DMZ
security-level 50
ip address 172.16.35.1 255.255.255.0
ospf cost 10
boot system disk0:/asa825-k8.bin
ftp mode passive
clock timezone PST -8
clock summer-time PDT recurring
dns server-group DefaultDNS
domain-name company.local
object-group service DM_INLINE_SERVICE_1
service-object tcp eq domain
service-object udp eq domain
service-object udp eq ntp
object-group service DM_INLINE_TCP_1 tcp
port-object eq www
port-object eq https
object-group network DM_INLINE_NETWORK_1
network-object host 10.90.1.10
network-object host 10.90.1.11
object-group network DM_INLINE_NETWORK_2
network-object host <outside ip>
network-object host<outside ip>
object-group service DM_INLINE_SERVICE_2
service-object tcp eq domain
service-object udp eq domain
object-group service DM_INLINE_TCP_2 tcp
port-object eq ftp
port-object eq ftp-data
port-object eq www
port-object eq https
port-object eq 3008
port-object eq 3010
port-object eq ssh
object-group network DM_INLINE_NETWORK_3
network-object 216.9.240.0 255.255.240.0
network-object 68.171.224.0 255.255.224.0
object-group service DM_INLINE_TCP_4 tcp
port-object eq 3268
port-object eq 3269
port-object eq ldap
port-object eq ldaps
object-group network DM_INLINE_NETWORK_6
network-object host 172.16.35.12
network-object host 172.16.35.13
object-group service DM_INLINE_TCP_5 tcp
port-object eq www
port-object eq https
object-group network DM_INLINE_NETWORK_7
network-object host 172.16.35.12
network-object host 172.16.35.13
object-group network DM_INLINE_NETWORK_8
network-object host 172.16.36.45
network-object host 172.16.36.46
object-group service DM_INLINE_TCP_6 tcp
port-object eq 2598
port-object eq citrix-ica
port-object eq www
object-group service DM_INLINE_TCP_7 tcp
port-object eq www
port-object eq https
object-group service DM_INLINE_TCP_3 tcp
port-object eq www
port-object eq https
object-group network DM_INLINE_NETWORK_4
network-object host<outside ip>
network-object host <outside ip>
network-object host <outside ip>
object-group network DM_INLINE_NETWORK_5
network-object host 172.16.35.12
network-object host 172.16.35.13
object-group network DM_INLINE_NETWORK_10
network-object host 172.16.36.15
network-object host 172.16.36.42
object-group network xenapp_servers
network-object host 10.90.1.45
network-object host 10.90.1.46
network-object host 10.90.5.54
object-group network xendesktop_servers
network-object host 10.90.1.38
network-object host 10.90.1.54
object-group network DM_INLINE_NETWORK_11
network-object host 172.16.36.10
network-object host 172.16.36.42
network-object 10.80.1.0 255.255.255.0
group-object xenapp_servers
group-object xendesktop_servers
object-group network DM_INLINE_NETWORK_9
network-object host 172.16.36.27
network-object host 172.16.36.31
object-group network DM_INLINE_NETWORK_12
network-object host 74.117.58.150
network-object host 97.95.240.159
object-group network DM_INLINE_NETWORK_13
network-object 10.90.10.0 255.255.255.0
network-object 192.168.80.0 255.255.255.0
network-object 10.249.0.0 255.255.0.0
object-group network DM_INLINE_NETWORK_14
network-object 10.90.1.0 255.255.255.0
network-object 10.90.5.0 255.255.255.0
access-list outside_access_in extended deny ip object-group DM_INLINE_NETWORK_12 any log disable
access-list outside_access_in extended permit tcp any host <outside ip>eq 3389 log disable
access-list outside_access_in extended permit tcp any host<outside ip>eq smtp log disable
access-list outside_access_in extended permit tcp any object-group DM_INLINE_NETWORK_4 object-group DM_INLINE_TCP_7 log disable
access-list dmz_access_in extended permit ip any any log disable
access-list inside_access_in extended deny ip host 10.90.100.25 any log disable
access-list inside_access_in extended permit ip object-group DM_INLINE_NETWORK_13 any log disable
access-list inside_access_in extended permit tcp host 10.90.1.27 host 172.16.35.11 eq smtp log disable
access-list inside_access_in extended permit ip 10.80.1.0 255.255.255.0 any log disable
access-list inside_access_in extended permit tcp host 10.90.1.33 object-group DM_INLINE_NETWORK_3 eq 3101 log disable
access-list inside_access_in extended permit tcp object-group DM_INLINE_NETWORK_14 any object-group DM_INLINE_TCP_2 log disable
access-list inside_access_in extended permit object-group DM_INLINE_SERVICE_2 object-group DM_INLINE_NETWORK_1 object-group DM_INLINE_NETWORK_2 log disable
access-list inside_access_in extended permit udp host 10.90.1.50 any eq ntp log disable
access-list DMZ_access_in extended permit ip object-group DM_INLINE_NETWORK_5 object-group DM_INLINE_NETWORK_11 log disable
access-list DMZ_access_in extended permit tcp host 172.16.35.10 host 172.16.36.27 eq smtp log disable
access-list DMZ_access_in extended permit object-group DM_INLINE_SERVICE_1 host 172.16.35.10 host 172.16.36.10 log disable
access-list DMZ_access_in extended permit tcp host 172.16.35.11 any eq smtp log disable
access-list DMZ_access_in extended permit tcp host 172.16.35.10 any object-group DM_INLINE_TCP_1 log disable
access-list DMZ_access_in remark rule for cag to owa
access-list DMZ_access_in extended permit tcp host 172.16.35.13 object-group DM_INLINE_NETWORK_9 object-group DM_INLINE_TCP_3 log disable
access-list DMZ_access_in extended permit tcp host 172.16.35.10 host 172.16.36.10 object-group DM_INLINE_TCP_4 log disable
access-list DMZ_access_in extended permit tcp object-group DM_INLINE_NETWORK_6 object-group DM_INLINE_NETWORK_10 object-group DM_INLINE_TCP_5 log disable
access-list DMZ_access_in extended permit tcp object-group DM_INLINE_NETWORK_7 object-group DM_INLINE_NETWORK_8 object-group DM_INLINE_TCP_6 log disable inactive
access-list slow-down extended permit ip 10.90.0.0 255.255.0.0 any
access-list slow-down extended permit ip any 10.90.0.0 255.255.0.0
pager lines 24
logging enable
logging trap debugging
logging asdm warnings
logging host inside 10.90.1.65 6/1470
logging permit-hostdown
mtu inside 1500
mtu outside 1500
mtu DMZ 1500
no failover
icmp unreachable rate-limit 1 burst-size 1
asdm image disk0:/asdm-713.bin
asdm history enable
arp timeout 14400
global (inside) 2 interface
global (outside) 1 interface
global (DMZ) 1 interface
nat (inside) 1 10.80.1.0 255.255.255.0
nat (inside) 1 10.90.1.0 255.255.255.0
nat (inside) 1 10.90.5.0 255.255.255.0
nat (inside) 1 192.168.80.0 255.255.255.0
nat (inside) 1 10.249.0.0 255.255.0.0
nat (DMZ) 1 172.16.35.0 255.255.255.0
static (DMZ,outside)<outside ip>172.16.35.10 netmask 255.255.255.255 dns
static (DMZ,outside) <outside ip>172.16.35.55 netmask 255.255.255.255 dns
static (DMZ,outside) <outside ip>172.16.35.50 netmask 255.255.255.255 dns
static (DMZ,outside) <outside ip>172.16.35.60 netmask 255.255.255.255 dns
static (inside,outside) <outside ip>10.90.1.21 netmask 255.255.255.255 dns
static (inside,DMZ) 172.16.36.31 10.90.1.31 netmask 255.255.255.255
static (inside,DMZ) 172.16.36.10 10.90.1.10 netmask 255.255.255.255
static (inside,DMZ) 172.16.36.27 10.90.1.27 netmask 255.255.255.255
static (inside,DMZ) 172.16.36.15 10.90.1.15 netmask 255.255.255.255
static (inside,DMZ) 172.16.36.42 10.90.1.42 netmask 255.255.255.255
static (inside,DMZ) 10.90.1.0 10.90.1.0 netmask 255.255.255.0
static (inside,DMZ) 10.80.1.0 10.80.1.0 netmask 255.255.255.0
static (inside,DMZ) 10.90.5.0 10.90.5.0 netmask 255.255.255.0
access-group inside_access_in in interface inside
access-group outside_access_in in interface outside
access-group DMZ_access_in in interface DMZ
router eigrp 200
network 10.0.0.0 255.0.0.0
passive-interface default
no passive-interface inside
route outside 0.0.0.0 0.0.0.0 209.242.145.129 1
route inside 10.0.0.0 255.0.0.0 10.91.1.1 1
route inside 10.249.0.0 255.255.0.0 10.91.1.1 1
route inside 192.168.80.0 255.255.255.0 10.91.1.1 1
timeout xlate 3:00:00
timeout conn 1:00:00 half-closed 0:10:00 udp 0:02:00 icmp 0:00:02
timeout sunrpc 0:10:00 h323 0:05:00 h225 1:00:00 mgcp 0:05:00 mgcp-pat 0:05:00
timeout sip 0:30:00 sip_media 0:02:00 sip-invite 0:03:00 sip-disconnect 0:02:00
timeout sip-provisional-media 0:02:00 uauth 0:05:00 absolute
timeout tcp-proxy-reassembly 0:01:00
timeout floating-conn 0:00:00
dynamic-access-policy-record DfltAccessPolicy
aaa authentication ssh console LOCAL
aaa authentication enable console LOCAL
http server enable
http 10.0.0.0 255.0.0.0 inside
no snmp-server location
no snmp-server contact
snmp-server enable traps snmp authentication linkup linkdown coldstart
crypto ipsec security-association lifetime seconds 28800
crypto ipsec security-association lifetime kilobytes 4608000
telnet timeout 5
ssh 10.0.0.0 255.0.0.0 inside
ssh timeout 60
console timeout 0
threat-detection basic-threat
threat-detection statistics
threat-detection statistics host number-of-rate 3
threat-detection statistics tcp-intercept rate-interval 30 burst-rate 400 average-rate 200
ntp server 10.90.1.50 source inside prefer
webvpn
class-map inspection_default
match default-inspection-traffic
policy-map type inspect dns preset_dns_map
parameters
message-length maximum 512
policy-map global_policy
class inspection_default
inspect dns preset_dns_map
inspect ftp
inspect h323 h225
inspect h323 ras
inspect rsh
inspect rtsp
inspect sqlnet
inspect skinny
inspect sunrpc
inspect xdmcp
inspect netbios
inspect tftp
inspect icmp
inspect pptp
inspect ip-options
service-policy global_policy global
prompt hostname context
no call-home reporting anonymous
call-home
profile CiscoTAC-1
no active
destination address http https://tools.cisco.com/its/service/oddce/services/DDCEService
destination address email [email protected]
destination transport-method http
subscribe-to-alert-group diagnostic
subscribe-to-alert-group environment
subscribe-to-alert-group inventory periodic monthly
subscribe-to-alert-group configuration periodic monthly
subscribe-to-alert-group telemetry periodic daily
Cryptochecksum:9ba1f1f89fa1a88af05e2fc5fdba3090
: endSo it would appear I've solved it by adding a static route in the global routing table back to the subnets in the vrf:
ip classless
ip route 0.0.0.0 0.0.0.0 10.91.1.2
ip route 10.249.1.0 255.255.255.0 Vlan851 <-----------------------
ip route vrf bingfish 0.0.0.0 0.0.0.0 10.91.1.2 global
Thanks -
Fingerprint Device access through firewall
Hello Fellow Mates,
One of my client has a fingerprint device configured in his environment. There is the internet router then there is the switch and then some pcs and the device connected. All are accessible through their headoffice as well, but now when the firewall is implemented between the internet router and the switch. Everything is working fine. Everything is accessible from the headoffice except the fingerprint device. internally its fine but cant be accessed from out. ACL allows ip any any. so no ip or port issue. went through the below link and have done everything as well but not luck. The default gateway for the fingerprint device is the Internet router, couldnt give it as the firewall because its in transparent mode.
http://www.midextimeandattendance.com/support/how-to/fingerprint-reader/connect-remotely/
Regards,
-MateenThe JMX Management Server is only used to start up the native Memory Leak Server. The call to start up the Memory Leak Server returns an anonymous port over wich all further communication with the Memory Leak Server takes place.
This is not a technical constraint though; it just reflects the way the client is currently written. I'll make sure the next version of the MemoryLeak Detector client supports a user specified port for the communication with the Memory Leak Server - at the very least through a system property.
Contact me at hirt(at)bea.com if this is something you need right away. ;)
Kind regards,
Marcus -
Hi I have a WRT54GC router and I have been using it in the wired mode for a year now. My computer (wired) and a VOIP adapter can get an IP from the DCP server easily.
The other day, I tried to connect to the wireless connection using a laptop and it could not get an IP. It tried for over 5 minutes and then gave the limited or no connectivity message. The same laptop can work with a wired connection and can connect to other wireless networks without any issues. I can not figure out what might be causing it. Any help would be appreciated.
Thanks, MohitIn the non-working computer, temporarily turn off your software firewall (Including Windows Firewall), and see if that helps.
If you are running WPA with AES, this is equal to WPA2. If you are also using Windows XP, then please note that Windows XP requires a patch to run WPA2. Go to Microsoft Knowledge base, article ID=893357 and it will direct you to the patch.
Sadly, the patch is not part of the automatic Windows XP updates, so lots of people are missing the patch. -
I'm having a small problem with my X220t running W7 64 bit.
My firewall Comodo is continously running processor 25 %.
--> the battery lasts only less than 2½ hours and the laptop is running hot.
I have uninstalled the firewall twice. The first 5-7 days it runs smooth but then something goes wrong and there is 25 % processor load all the time.
I have only used Comodo for past 3 years.
Comodo also seems to be the sovereign number 1 in all the reviews:
http://personal-firewall-software-review.toptenreviews.com/
http://www.consumersearch.com/firewalls
http://www.all-internet-security.com/top_10_firewall_software.html
http://www.techsupportalert.com/best-free-firewall.htm
So I could have use for your recommendations for my next firewall =)Hello,
I know this post is old but hopefully some will find my response helpful in deciding whether or not to use a commercial software firewall.
Unsolicited Incoming Traffic
These are usually incoming attacks on your IP address from an unknown source. The built-in Windows 7 firewall is perfect for blocking unsolicited incoming traffic. Moreover, if you have a hardware firewall router, it will block all unsolicited traffic before it gets to your Windows 7 firewall.
Solicited Incoming Traffic
This occurs when you unknowingly access a website that intends to download a trojan and/or malware to your computer. These trojans and/or malware plant a seed on your computer to be executed immediately or periodically. The key to preventing the planting of this seed is to never let it get onto your computer; therefore, it must be identified (and blocked) before it is downloaded. A good antivirus program (I use Avast) should be able to warn you of these seeds and give you the chance to abort the internet connection. However, if it does get onto your computer, then you are faced with a different set of circumstances where a commercial firewall might benefit in identifying any leakage. This is where a trojan or malware has successfully been planted on your computer and decides to wake up, do its intended job, and then access the internet for its intended purpose. Read more about leakage and commercial firewall test results here:
http://www.matousec.com/info/articles/introduction-firewall-leak-testing.php
Personally, I use the basic Windows 7 firewall with a hardware router firewall on the front end. I am confident that my antivirus will warn me if I access a website that is attempting to download a trojan or malware to my computer and it will give me a chance to abort the connection beforehand. Also, I do not access wifi hotspots (which would change my front end protection) or anyone else's internet connection. In my case, I also determined that I do not need Windows Defender so I turned it off to save resources. In fact, the Action Center even warned me that I had two malware programs running at the same time.
In summary, there is no "one size fits all" here so please do your homework!
Good luck!
Maybe you are looking for
-
DMS - default original documents path?
Dear experts, We are planning to setup a DMS for our SAP system. Can we specify a "prefix path" somewhere in a single location for all our original documents? Doing so would avoid the need to adjust all the references to the original documents if our
-
Greetings Ive started customer_main intial load and its still in running status. SMQ2 shows R3AI_CUSTOMER_MAIN in SYSFAIL status. When I double click on it it throws out error in Mapping( Details: Transaction SMW01) No queues in R3 Pleaze advice im s
-
Lost ITunes library in Windows XP Home Edition
Hi: It took close to 10 hours reconverting all my music from an external hard drive to a new installation of ITunes on a new laptop so I can put the music on a new IPod. All the music got converted--my husband and I both saw it. Then I went to my hus
-
Java2D graphics -GIS (Help pls)
Hey!... My Applet is basically split into two parts....a JTree on the left and a text area on the right...i have two arrays...x3Points and y3Points that contain the map co-ordinates that are retrieved from the server side. They contain data like foll
-
Same Query Result via jdbc and sqlnet
Hi, i've got a strange Problem, i think. i submitted a query via sqlplus console and than via a java application using jdbc and results are not the same. is this in some cases a known issue? regards guido Edited by: xia0bo on Aug 19, 2009 2:39 AM sor