do you block your apps from contacting DNS servers?

[abc]

i guess the apps periodically try to find its update server and needs to speak to DNS first, but my browser advises me of what is about to occur.

if you let it through, then you'll periodically get a prompt from the app that a 'new version is avail' would you like to DL now, remind me later? kind of thing.

 

[orion23]

I only authorize access for application I can trust and that I would like to be updated often such as messengers and antispyware utiities.

I use norton firewall and it has an option for Permit once, or permit Always, that way it does not ask the same question over and over again.
b

 

[Markbnj]

Just spend $59 on a hardware router/firewall, and turn off the software firewalls. They steal CPU cycles to do things like stateful packet inspection.

There is one situation that might argue in favor of having both, and that is using the Windows firewall (or Norton) to prevent malware that you download from initiating a connection outbound. The hardware firewall will prevent anything outside your network from initiating a connection inbound, but it typically will allow software running inside your network to connect outbound.

 

[JustAnAverageGuy]

Originally posted by: Markbnj
Just spend $59 on a hardware router/firewall, and turn off the software firewalls.

I disagree. Hardware firewalls are a necessity yes, but I would argue that software firewalls serve their purpose as well.

Hardware only keeps data from coming in, software keeps it from going out.

 

[Markbnj]

I think I said that . But anyway, I agree. If you have a chance of downloading malware then having the software firewall is good protection.

 

[Nothinman]

If you have a chance of downloading malware then having the software firewall is good protection.

You always have that chance, just look at the recent WMF exploits.

 

[Markbnj]

Yeah, you always have that chance. It's a risk vs. cost scenario. I don't visit certain kinds of sites, or open certain types of emails (not even in the preview pane), and I believe my risk of getting malware is therefore extremely low. My results bear that out. I personally don't think someone in that category needs to run a software firewall to prevent outbound connections unless they are absolutely trying to cover every risk.

 

[skace]

I would never block an application that I trusted enough to install from checking for updates.

 

[darkcyber]

You don't have to visit certain sites or open emails...just listen to a Sony Music cd in your pc...lol!

As long as it's an app that you trust...it's probably a good thing to let it update...software is usually buggy by nature and needs to be patched. If you don't know for sure if the app is a trusted app...do a search on the net for it and see what it is...then make that call.

 

[Nothinman]

As long as it's an app that you trust...it's probably a good thing to let it update...software is usually buggy by nature and needs to be patched. If you don't know for sure if the app is a trusted app...do a search on the net for it and see what it is...then make that call.

But how can you trust an app for which you can't inspect the source code? Windows apps phoning home and being bundled with spyware is the norm these days and the ones that don't are only 2 steps away because getting any amount of money from ads and the like is better than nothing, at least in their mind.

 

[kukyfrope]

I run Kerio firewall for the purpose of monitoring apps trying to make outbound connections.

 

[abc]

kerio is better than norton stuff aint it.

 

[nweaver]

H/W firewalls can (AND SHOULD) limit outbound connections.

 

[Nothinman]

H/W firewalls can (AND SHOULD) limit outbound connections.

But all the evil app has to do is communicate over a common port like 80 or 443 and your firewall will let it out without question.