dslreports logo
site
 
    All Forums Hot Topics Gallery
spc

spacer




how-to block ads


Search Topic:
uniqs
913
share rss forum feed

scottp99

join:2010-12-11

Best secure Win 7 Firewall settings?

I have a PC behind a SPI firewall router and plus running the Win 7 firewall. I have ALL Outbound rules set.
What settings are the most secure when configuring the Windows firewall? I always click on the recommended settings, but I am afraid those settings are not very adequate enough.

Is it really safer to just block all Outbound and then enable only the programs I need or what? Please explain or better yet, can someone please provide me with a printscreen?
Thanks!



norwegian
Premium
join:2005-02-15
Outback

It depends on user requirements - there is not set rule.

Some suggest:

DNS - port 53
Internet - port 80 of course
FTP - port 20, 21
SSL - port 443
Games- need specific ports etc

What else do you have installed?

Whether you allow udp or tcp, well it depends.
Try both on/off to see what work or not then proceed.
--
The only thing necessary for the triumph of evil is for good men to do nothing - Edmund Burke



planet

join:2001-11-05
Oz
kudos:1
Reviews:
·Cox HSI

1 recommendation

reply to scottp99

I use Sphinx Firewall Control in addition to Windows FW on Win 7 64 bit (be mindful of 32 and 64 bit download options). For me, this add on app made it easier to set rules, especially for outbound traffic.
»www.sphinx-soft.com/Vista/order.html



therube

join:2004-11-11
Randallstown, MD
reply to scottp99

quote:
Is it really safer to just block all Outbound and then enable only the programs I need or what?
To me, that would seem the only logical way to go about it.
Which is also the complete opposite of the default MS method.

> I use Sphinx Firewall Control

Likewise Binisoft Windows Firewall Control.

HELLFIRE
Premium
join:2009-11-25
kudos:13
reply to scottp99

»www.ranum.com/security/computer_···ls/dumb/ -- #1 says it all.

Permit ONLY what is needed, deny the rest and LOG IT. It'll drive you crazy, but if you value your security more...

Regards