Helproom Download forum rules


SUNBELT PF BLOCKING THREATFIRE


Forums > Helproom

 

Start new subject | Reply to this subject

[1] 

send an email to Orfor Orfor

Mon, 25/02/08@09:52

Call me gullible, but I followed a recent recommendation elsewhere on the 'Net to try the Sunbelt Personal Firewall as an alternative to what was said to be the increasingly "mediocre" Zone Alarm Free.

So I've dl'd and installed SPF and yes, it looks good and seems to function well. I don't think it's as big a resource user as Zone Alarm Free, either.

However. I also have ThreatFire (used to be Cyberhawk).

And here's the problem. Sunbelt PF seems impossible to manage in the way, say, that Zone Alarm was.

ZA would alert, then ask for permission to block. The user had an option to choose.

With Sunbelt Personal Firewall, I'm sitting here with the 14th splash screen -- count 'em, 14th - since booting up today. It reads:

Sunbelt Personal Firewall. SPF has detected and blocked an intrusion attempt of type Code injection. The intruder is TFService.exe.

Beneath this warning, there are precisely two "buttons": one button is to close the warning, the other is to allow details of the warning to be seen / hidden.

As to actual user choice -- allow Threatfire, do not allow Threatfire -- there's no sign at all.

Going through the Sunbelt "configuration" and settings hasn't helped any. "Exceptions" seem to relate to web addresses. Not a user's other software.

If anyone can help, that'd be appreciated. But what a pity that this firewall that so many seem to rave about offers nothing like the degree of instant user control provided by the much derided ZoneAlarm.

send an email to Orfor Orfor

Mon, 25/02/08@19:33

How amazing.

All the computer enthusiasts here and not one of 'em uses Sunbelt Personal Firewall.

Not exactly a vote of confidence in that firewall, then. . .

send an email to Technotiger Technotiger

Mon, 25/02/08@19:47

I am sure it is not just Sunbelt, have a look at this lot ... click here

I use Sunbelt, the paid for version, and I think it is the best.

Bear in mind a lot of members work during the day! The 'night-shift' is usually busier than the 'day-shift'.

send an email to beynac beynac

Mon, 25/02/08@20:07

From Sunbelt personal Firewall help:

To add an exception to code injection parameters


Open the Host Intrusion Prevention System - Advanced Settings dialog box; then click Exceptions... under the Code injection section. The Code Injection Exceptions dialog box opens.

Make a selection:

To edit an existing item,
Click Edit... after selecting an item from the list. The Edit Code Injection Exception dialog box opens. Click Browse... to search for then select an item; then click OK.

To add a new item,
Add.... The Edit Code Injection Exception dialog box opens. Click Browse... to search for then select an item; then click OK.


Click OK. You return to the Host Intrusion Prevention System - Advanced Settings dialog box.

send an email to beynac beynac

Mon, 25/02/08@20:11

Sorry, the above is a bit garbled (I copy/pasted it from the Help page and the formatting went a bit odd).

The relevant bit is:

Open the Host Intrusion Prevention System - Advanced Settings dialog box; then click Exceptions... under the Code injection section. The Code Injection Exceptions dialog box opens.

Click Add.... The Edit Code Injection Exception dialog box opens. Click Browse... to search for then select an item (TFService.exe); then click OK.

Click OK. You return to the Host Intrusion Prevention System - Advanced Settings dialog box.

send an email to pac73 pac73

Mon, 25/02/08@21:06

Why not try Online Armour click here.

I used it before Eset Smart Security,and was impressed with it.
It came top in these tests click here.

send an email to Orfor Orfor

Tue, 26/02/08@13:24

beynac:

Many thanks for that! I actually gave myself a strong lecture earlier this morning relating to the topic: RTFM. And finally found the answer -- exactly as you said.

It really was very kind of you to take the trouble to help; my apologies for any inconvenience caused. In defence (though it's no defence, really!) I've actually gotten used to the allow / deny protocol; the procedure of manually adding "allowables" prior to the actual operation of the firewall program is less than intuitive.

This is the second time I've hit problems with Sunbelt Personal Firewall, where I've gone to a website, roamed happily through it, then attempted to order from that website but met with a 404 error.

Turned out that something else should've been switched off in Sunbelt Personal Firewall, because although no warning was flagged up as to why a 404 error kept being caused, it was actually arising as part of Sunbelt's standard operational activity (Referer: Deny Servers To Trace Web Browsing).

pac: yup, I'll go have a look. Thanks for the tip!

(Technotiger: I know. I know. My fault. Desperation was beginning to set in! Incidentally: have you ever had 404s as a result of the Referer/Deny Servers thing? It certainly baffled me.)

send an email to Technotiger Technotiger

Tue, 26/02/08@13:30

have you ever had 404s as a result of the Ref ....

No, never had any such problem. I simply set it-and forget it, have only had to allow a few exceptions for sites I use regularly, otherwise I just about forget it is there.

send an email to beynac beynac

Tue, 26/02/08@14:06

You're welcome. :)

I've got the "Referers - Deny servers...." box ticked and have never had any problems.

I have the paid-for version of Sunbelt but I don't use the Web Filtering as that did give me a few problems and, IMHO, is a clumsy way of achieving ad-blocking. I use Firefox with NoScript and AdblockPlus add-ons which does the job very nicely.

send an email to Orfor Orfor

Tue, 26/02/08@14:56

Sincere thanks again you two: very reassuring!

Re the 'Referer / Deny Servers' thing: what was so infuriating about this disruption was that I was dealing with a well respected PC specialist company UK with a well respected website (which you can figure out from what I've just said.)

I'd repeatedly "customised" a build yet every time I came to submit the details so as to get a price, bang! 404 error.

Baffling, because doing exactly the same thing on Dell Outlet's website didn't trigger a 404, and to be honest, every other website I've been on where filling a 'shopping cart' has been required also escaped the attentions of the Sunbelt Firewall.

Anyway. I've turned off the Refer link permanently, and as nothing else is checked I've basically made Sunbelt's 'Web Filtering' redundant, like beynac has.

It really was frustrating though: using a PC website to spec up a PC but unable to submit the finished work because my own PC was being obstructed by a PC protection program. . .

(Just for fun, I've tried the same exercise again just now at the same website, with the referer filter turned on. And, guess what: 404 again.)

[1] 

Total threads 330646 | Total posts 2151670 | Total users 295504

 Forums > Helproom

Back to top



To post a message to this subject you must be a registered member of this website and logged in.
If you already a registered member please log in to the site using the form in the 'User Area' above.
I want to...
Register with PC Advisor.
Get my passsword sent to me again.


Reader comments

More reader comments >>