It generally doesn't block outbound traffic, but shouldn't it look for
the incoming connection to the Trojan?  The literature for the product
boasts a vaunted intrusion detection algorithm that can identify
malicious incoming traffic, presumably including traffic for known
Trojans.

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED]]On Behalf Of Steve Riley (MCS)
Sent: Tuesday, February 29, 2000 8:20 PM
To: 'Fogel, Avi'; '[EMAIL PROTECTED] '; '[EMAIL PROTECTED] '
Subject: RE: Quick qeustion about BlackIce Defender.


Correct. BID doesn't perform any kind of outbound protection.

I've been playing with Zone Alarm from ZoneLabs. It does offer outbound
protection, plus it's free. You might consider taking a look at it.
http://www.zonelabs.com.

___________________________________________________________
Steve Riley
Microsoft Telecommunications Consulting in Denver, Colorado
   e-mail: mailto:[EMAIL PROTECTED]
   call/page: +1 303 521-4129 (cellular)
   SMS: mailto:[EMAIL PROTECTED] (100 characters)
   For MS Internet info see http://www.microsoft.com/isn/
Applying computer technology is simply finding the right wrench to pound
in
the correct screw.


-----Original Message-----
From: Fogel, Avi [mailto:[EMAIL PROTECTED]]
Sent: Sunday, February 27, 2000 7:48 AM
To: '[EMAIL PROTECTED] '; '[EMAIL PROTECTED] '
Subject: RE: Quick qeustion about BlackIce Defender.


For a host based filter to block Trojans from doing their damage it
needs
the ability to be configured such that it blocks specific outbound
services
/ ports.
I do not believe Black Ice has this capability.

Avi

-----Original Message-----
From: [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: 2/27/00 2:02 AM
Subject: Quick qeustion about BlackIce Defender.

Hi everyone.  Im pretty new to the whole Firewall scenario.  I am now
running
BlackIce Defender on my pc (win95).  My question is:  If i somehow get
infected with a trojan such as Netbus or BO2k which opens a backdoor in
my
computer and allows access for others, will BlackIce stop the attacker
from
getting into my computer using that backdoor?

Thanx in advance.

Dxfrost
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]
-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

-
[To unsubscribe, send mail to [EMAIL PROTECTED] with
"unsubscribe firewalls" in the body of the message.]

Reply via email to