This is exactly identical to
the main configuration of the older XP firewall! It seems that this
is the only way to allow users to connect to specific hosted services
like websites and FTP sites you have created on your
computer.
We fail to understand why
Microsoft could not implement the program based 'exceptions' list for all
interfaces and hosted services like the Zonealarm firewall has done. As it is, configuring
the firewall for programs and configuring for internal Windows services like web
hosting and FTP are split into two separate areas, which is rather confusing,
with no obvious documentation to help out. Poor design choice
here.
To rephrase this, if you want
to allow a programs like Shareaza or MSN Messenger to accept connections from
the Internet, you create a program-based 'exception' for it. If you want
to allow a built in service like FTP or web hosting to accept connections, you
must create a 'service' on each network interface for it, as with the old XP
firewall system.
On the bright side, the program
based exceptions worked very well as we tested them. MSN file transfer,
always a thorny problem with the old Windows XP firewall, works by default now
which made us happy.
One thing we should point
out. The Windows XP firewall now detects and intercepts any attempt by an
installed program to act as a server, popping up a message box informing you of
the event and asking for input.
This is a great improvement
over the older XP firewall, which ignored all data originating from inside the
system. However, the new firewall still does not block attempts to access
the Internet. So, for instance, it would not make you aware of the fact
that your new copy of Office is connecting with Microsoft every time you start
it up, or that some application you never heard of (possibly spyware) is
attempting to connect to a remote server. This sort of protection, which
the free Zonealarm and Sygate firewalls offer, is essential for proper detection
of spyware and Trojan horse viruses. It's unfortunate that this
feature was not added fully.
RSS Newsletter
