Search for the Best AntiVirus & Firewall Software + Top 20 Vulnerabilities Apr05

[Quad Master]

Hi All

With the Internet no more remaining a safe place , always new and better
virus comming everday & hackers finding solution to break the firewall and
getting access to your PC.

I would like to ask all you people out here what do you use to protect your
self from these intruders & why.

I use
- Norton AntiVirus 2004 with latest AV Defs
- Sygate Personal Firewall Pro

Why
- I have been using Norton since a very very long time and trust it a lot
and they also come with latest defs regulary , but hate the CPU utilization
- Sygate , because i find it easy to manage and provides good protection.

Top 10 External Vulnerabilities: (April 2005)
Microsoft Windows ntdll.dll Buffer Overflow Vulnerability
Buffer overflow in Microsoft Local Security Authority Subsystem Service
Buffer Management Vulnerability in OpenSSH
Sendmail Prescan() Variant Remote Buffer Overrun Vulnerability
Microsoft Windows RPC Runtime Library Vulnerability
Microsoft Windows ASN.1 Library Integer Handling Vulnerability
Windows TCP/IP Remote Code Execution and Denial of Service Vulnerabilities
Writeable SNMP Information
Unauthenticated Access to FTP Server Allowed
SSL Server Allows Cleartext Communication Vulnerability

Top 10 Internal Vulnerabilities: (April 2005)

Microsoft SQL Weak Database Password
Buffer overflow in Microsoft Local Security Authority Subsystem Service
Microsoft Messenger Service Buffer Overrun Vulnerability
Microsoft Windows RPC Runtime Library Vulnerability
Microsoft Windows ASN.1 Library Integer Handling Vulnerability
Microsoft Buffer Overrun in JPEG Processing
Adobe Acrobat Reader Format String Vulnerability
Microsoft Server Message Block Remote Code Execution
Microsoft Internet Explorer Multiple Vulnerabilities
Microsoft Word Vulnerability Could Allow Remote Code Execution

More Info :- http://www.qualys.com/research/rnd/top10/

Feel you have the most secure PC Test here
FREE Scan of the Top 10 External Vulnerabilities
https://freescan.qualys.com/?lsid=6389

Test your PC exposure here
http://security.symantec.com/default.asp?productid=symhome&langid=ie&venid=sym

Qualys Browser Checkup
http://browsercheck.qualys.com/index.php

 

[Quad Master]

Guys forgot to mention Spyware removal tools also as it also helps you
Previous post not editable so posting here.

I use
AdAware SE Personal Edition 1.05 [with latest updates]
SpyBot Search & Destroy 1.3 [with latest updates]

Also waiting for your replies

lease: participate

 

[chip_0]

OS - Slackware Linux 10.1
Antivirus - N/A
Anti-spyware - N/A
Firewall - Kernel iptables/netfilter (a basic rule set to block all incoming connections)

OS - Archlinux 0.7
Same as above

OS - Windows 98 SE
Antivirus - Antivir PE
Anti-spyware - Adaware, Spybot
Firewall - Sygate Personal Firewall

Basically I dont use windows for accessing the internet much, so I wanted the lightest set of security applications, which provide decent security. Perhaps I will ditch the AV alltogether ...

 

[Quad Master]

Linux is way to go

Dont you feel the need of CLamAV on Linux.
And how is Firestarter GUI as firewall in Linux.

 

[chip_0]

Well I don't use a "live" antivirus, as the danger of a virus on linux is extremely low ... but I use the command line F-Prot and BDC to scan files occasionally.

As for firestarter, I hear its quite a good configuration tool for iptables ... currently I use a basic set of the following iptables rules -

iptables --policy INPUT DROP
iptables --policy OUTPUT DROP
iptables --policy FORWARD DROP
iptables -A OUTPUT -j ACCEPT -o lo
iptables -A INPUT -j ACCEPT -i lo
iptables -A OUTPUT -m state --state NEW,RELATED,ESTABLISHED -j ACCEPT
iptables -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT

This is working fine for me, so I didn't try other configuration tools yet ... however firestarter will be a very good option if you want more advanced settings and don't like the command line.

 

[Quad Master]

Thanks ujjwal