Disable the internal firewall in XP???

[DiddlySquat]

Hey guys, i got a quick question. How do you turn off the internal firewall in win XP??? I know that you go through the registry but i cant rmember the exact steps.... any help would be greatly appreciated... Thanks!:devil

[Vladd44]

this link should explain well enough

http://www.helpdesk.umd.edu/os/windo.../xwin_32/3959/

[collideous]

Keep it enabled is what I'd recommend. Drill holes in it (open ports) only for programs that otherwise wouldn't function properly. I had to do that for Shoutcast and WinMX. For FTP just switch your client to passive mode. Whenever you don't run those programs, close up the holes you made. It's just an extra layer of security, and if you're on DSL or cable, it should never be the only one.

[Azo-999]

Originally posted by DiddlySquat
Hey guys, i got a quick question. How do you turn off the internal firewall in win XP??? I know that you go through the registry but i cant rmember the exact steps.... any help would be greatly appreciated... Thanks!:devil

Please tell me (and others) why U want it disabled. I have had it on now all the 4 months having XP and never needed to take it off. It wont slow down Your work - vice versa it gives U more shelter especially combined with a good "real" firewall (Sygate, Tiny FW, ZaPro, Norton etc work just fiine with it...)
There at Network Properties / Advanced / Settings is the services that U "let in/out" with it - they can be checked on/off and use the add button to put there more "holes" etc...Wery customizable and I feel it as a part of my XP.
One more thing : The Internal Firewall does more than just blocks Your ports : It keeps up the dynamic managment of the entries in the Hosts-File (the famous plaze to ban IP's). If U add there one "on the fly", it comes valid immediately, but not if U stop the service...

P.S. that link : http://www.helpdesk.umd.edu/os/windo.../xwin_32/3959/ just tells us to temporarily turn the FW off if having difficulties with some apps internet connection and see if it makes any difference. The same thing (harder way?) is to find out the ports that this particular app needs and add them there opened with the Advanced Add Command at network connections....

Peace and Understanding (wholy machamonie what was that?)

:sw :sw :sw :sw

[grab_grab_the_haddock]

one of the first things i did when i got my XP was to switch the firewall off. not for any reason other than i didnt trust microshaft one bit. i just knew it would be configured to allow every microsoft app access, and i didnt really want all them ports open. course i replaced it with another firewall (sygate pro) and everything seems cool. Course if there was a good reason to switch it back on again i wouldm but ive never come across one.

[Azo-999]

Originally posted by Krell
I totally disagree. I have ran multiple firewalls before. I benchmark firewalls, and I see no real benefit of running the ICF on top of Sygate Personal Firewall, or Zone Alarm Pro, if you have it configured correctly.

Calm down Krell - U telespec ;-) I'm not telling what to do and think U either - we're just sources of information for DiddlySquat - maybe he's some confused now...? :shy

I have so many holes at my ICF that it's almost invisible and NOT takin' much resources in my tests. I just use it to fix some holes that my sygate's not doing well. With my environment they sits just well together and I'm not too lunatic of the 0.1% speed dropping at my traffic-rate that this config does!

If one's having Norton antivirus with auto-protect enabled (many do have) - the speed drops about 1-3 % of the maximum. because it makes a named pipe at I/O mem and translates all the data through that pipe at same time scanning all the packet headers and finally collected files against thousands of possible viruses.

AND I need the dynamic managment of HOSTS-File, because I add/modify things daily there (running TweakMaster Pro's Local DNS-server which makes my DNS-Calls many times faster - but as the network changes all the time, I must have them configured daily for not to get a "page not found" infos...)

So no need to be lunatic or fanatic of one simple process. If one likes to have it, the other one wants to get rid on it - I have made a compromize : having both doing their job as separate processes not overlapping each other (maybe a little...)

We all here say our opinions - not to tell someone Must use this or that, just suggest what we've experienced...!!!

If I would like to "dump" my configuration here, it would be quite a long list - so I suggest that Mr. thread starter decides himself what to do - now having info about how-to-do!

P.S. People seem to be quite afraid of MicroSoft's Spying - Is Windows a SpyWare Component at PC's HD? Is it a Kazaa Media Desktop for them? I'm not afraid, because they really DO NOT spy us anymore - they did a little years ago, but god to noses of that and losed some millions of $$$ at courts...
(And I do not have anything to be spyed - so let 'em spy if that happens - I'm sure that they don't (and can't) break my PC from "Redmond Walley" ;-)

MakePeace! Today!

:sw :sw :sw

[Azo-999]

Originally posted by Krell
If you don't think what we do is being tracked, and feel free in your country, good for you. I live in the US where our personal freedoms are being eroded right out from under us..

U.S. - The land of freedom and democracy....
Yes - the above clause is really nonsence history if it has never even been true - the same seems to be here at Finland, too...
I just have "shut down" my "worriness", because I do not see a point what to worry - yes I sniff IP-packets / fragments every now and then and really see what's happening "behind our backs".

Of cource (after democracy went to powers of marketing and the money decided to give the laws and orders) the big companies are Very Interested of us as consumers and try to sniff out of our machines every possible "statistical information" to figure out where to get more money - that loop seems to be neverending...

But what to do? 3rd party Firewalls seems to send packets to 3rd party companies, MS to MS etc...

They say that we're safe - Yes, we are safe when concidering the attackers, crackers, phreakers etc - but never safe as intellectuals. Just sniff Sygate's or ZaPro's packets - what do we see? Eventually 128bit-crypted packets between normal traffic, hard to quess where are they going....

That's all folks - about our (dead) democracy...

"Le Roi est Mort - Viva le Roi" - and (Make)Peace!

:sw :sw :sw :sw

[phalkon30]

First thing i did was turn off my firewall in xp

i have a cable modem that runs to a linxys router hub, it has its own built in firewall and gives me enough problems as it is, with xp's firewall i couldnt even send files through messaging

i still havent been hacked after over a year

[Azo-999]

Originally posted by phalkon30
First thing i did was turn off my firewall in xp

i have a cable modem that runs to a linxys router hub, it has its own built in firewall and gives me enough problems as it is, with xp's firewall i couldnt even send files through messaging

i still havent been hacked after over a year

Yes - we really do not SEE that we are hacked - in that point U are right. BUT at the other hand - are we hacked? The answer is YES - we are so called "soft-hacked" every now and then, likely invisible for us - and for most firewalls.
But that bothers me just a bit, I do not have any essential information at my PC to be collected out by those soft-hackin' companies (MS, Sygate, Symantec...). Let the world go round because that's the way the strory goes...

Peace....!!!

:sw :sw :sw :sw

[snowborder74]

All i can really think of with a firewall is that they are like parties the more the merrier.. so if you dont mind configuring a bunch of them go ahead and use many espcially if on broadband..i use zone alarm myself and i also have NAT enabled in my router (belkin to be exact)

[shelob]

Originally posted by grab_grab_the_haddock
one of the first things i did when i got my XP was to switch the firewall off. not for any reason other than i didnt trust microshaft one bit.

does anyone else see a slight contradiction in this remark ?

[Krell]

Does anyone see the logic of you coming along 6 weeks later and butting in about it?

NO

Shut the hell up, and stop trying to start shit with people who have been here and contributed WAY more than you ever will.

I understood his logic, and I think most everyone else does too.

.

[shelob]

I just consider it a bit strange to say that you don't trust microsoft one little bit and then install microsoft xp,the most internet focussed operating system ever, on your PC, in which automatic internet access must be granted to so many microsoft programs or it won't work. If thats logical thinking to you then fine
....but if you want to scream and bitch and get your pantys in a wad over it krell my dear...please go ahead...i don't give a shit.
Please feel free to post more monosyllabic rants in the thread, even if doesn't concern you one little bit..i don't mind if you want to poke your nose in even more...really go ahead...make our day.

[Krell]

Does anyone see screaming and bitching, no. They see me telling you to shut your hole, just like the last time I did.

This whole conversation was before your time, and the point was that the ICF couldnt be trusted, not that we will boycott Microsoft totally.
"i just knew it would be configured to allow every microsoft app access"

I see you questioning the validity of what he said, where you are not qualified to. So yes, I will stick my nose right in here, where it belongs.

[grab_grab_the_haddock]

Originally posted by Krell
Does anyone see the logic of you coming along 6 weeks later and butting in about it?

hehehe i thought that was kinda funny as well, actually the original post was 2 and a half months ago. He must have trawled through shitloads of old posts to dig that one up. kinda sad really.

He's just sore cos i made him look like the mental midget he so obviously is on another thread a couple of weeks back.

Don't be too hard on him though, after all we do have to make certain "allowances" for the intellectually challenged