Print

Welcome to Smokey's Security Forums.

Guests have only limited access to the board and it's features, please consider registering to gain full access!

Registration is free and it only takes a few moments to complete.

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[n8chavez]

I would like to see JPF have support for checksums to applications that are in deep directories.

Ex. C:\Documents and Settings\$user$\Application Data\Microsoft\Internet Explorer\Quick Launch\Applications\

[xaoc]

In Application Tab will be useful option "Expand All"
And of course ability to close selected connetion and ability to jump to its rule

[xaoc]

Why do you want to sort rules by action? The order of the rules determines the sequence of analysis.

I don't mean that the sorting must influence the sequence of firewall analysis.
This feature is just for more comfortable editing of rules. For example, you want to find all applications which are communicating with remote port 80 and then make some actions with rule content (the logical sequence of the several rules can't be changed in such mode).

[ssport]

Why do you want to sort rules by action? The order of the rules determines the sequence of analysis.

[xaoc]

An two more feature requests:

In the window with rules it would be nice to have an ability to SORT rules by action, event, port, address, etc. And of course th sorting by the original rules order.

And one more - a timestamp for each rule will be useful (to show when it was created). ps - and maybe a DOMAIN\USER who added the rule.

[xaoc]

I think that you should add keyboard shortcuts for window popups
Fow Quick Block/Allow, Permanet Block/Allow, etc

[General]

I think jetico is too strict at windows startup time, it is easy to conflict with some applications. Can you make an option to simply block or allow all packets at startup time? maybe this is an alternative to somebody like me (refer to viewtopic.php?f=51&t=13815)

[ToniMacaroni]

First of all, thank you and congratulations for offering the best, most transparent and most professional firewall out there. Some time ago I used to use Comodo firewall until Version 2.4 but the new version 3 is a catastrophe so I looked around for other programs. When I first tried Jetico 2.x it was like: "what the heck!". I then tried several other firewalls but I found most of them being totally messed up with stuff that has nothing to do with a firewall anymore. Most of them degenerated to surveillance programs for children who dont know what they do and need to be supervised. With whole lots of gaudy colors fitting perfectly into this picture of course. So with no alternative I came (fortunately) back to Jetico and after a good period of time I figured out how it works. This is a brilliant program that is almost perfect as it is right now, concerning the whole interface. Of course there is always stuff that can be improved but I totally agree with some of the previous writers: Please leave the general structure as transparent and simple as it is, don't add stuff like plugins, Virus-Scan, etc.. This is the sole reason why I use Jetico. Kids can use other programs listed above or install 3rd party stand alone software if needed.

[ssport]

For a better relevation of my feature requests, I also provide percentages of urgencies.

100% cope with attacks
100% bug-free
99% help files explaining precisely the function of everything (1)
80% relating JPF to Vista integrity levels and Windows user names (
80% creation of rules for both indirect access and specified applications (2)
80% flawless and easily understood version update (3)
20% sorting by click on column head in groups view (4)
20% sorting alphanumerically also within each group in groups view
20% showing the program symbols in group view (5)
20% easier (faster) editing of application paths in groups view (6)
20% copy application path in configuration view (7)

(1) GUI commands, objects (e.g, "group"), files, concepts (E.g., what exactly is "idirect access"? What does "stateful" mean?), axioms (E.g., which harm can be done by an USB stick? What is the relation between the Windows services and the firewall? How are Vista's integrity levels and Windows user names used by JPF?). A firewall is only as good as the user is able to use it; for that he needs precise and complete information.
(2) In pop-ups, the applications are shown, but in the rules the more specific information about them is lost entirely so far. It must be possible to specify applications a) from a pop-up, b) when creating rules manually.
(3) Currently deinstallation still leaves something in the registry and the application folder and one cannot predict what. I like to deinstall before installing a newer version because then I am on the safe side of getting a clean(er) installation. Still one has to be careful (backup of config files, removing network cable, etc.); an update should give appropriate hints so that the user does not forget all this. The installation of the new version is a mess with respect to importing files. Which wizard should (or should not) I use and why? Which template file is better - my previous one or the new one? How do I best replace the jpfconfig.xml by my most recent user config file? The installation process should tell me that and the reason instead of suggesting me wizard questions that lead to two instances of Optimal Configuration until I shutdown the new version, replace the file manually, and start JPF again. This is counter-intuitive and hard to remember.
(4) The 20% are the things you would expect me to ask for in this thread. However, we should not forget about the key aspects with greater percentages.
(5) Quite like the program symbols are shown in configuration view.
(6) Currently too many clicks are required for simple tasks like adding or deleting a program path.
(7) So that it can then be pasted in groups view when adding a new program path to an application group.
( This should also be shown in the GUI (quite like Sysinternals' ProcessExplorer does). Vista introduces the security concept integrity levels; so a firewall should use that both internally and in the GUI. Besides this would also provide sandbox features to some extent (although not as far as VMware).

[pseudo triangle]

ability to close a connection (like in Outpost) in connections monitor ("applications")

[AJohn]

Hello brain, I have already asked for SNORT support a long time ago

[brain]

ability to add HIPS rules, so any packet can be tested agains rules where common known dangerous packets are filtered out (like it was done in Tiny Personal Firewall)
Backdoor-rules could be shared among users etc...

[mets]

I would appreciate it if the Jetico team could respond to each request

It would certainly be nice if some responce was made from Jetico with regard to this thread.

From the first request on thread,... which was for the ability to export rulesets, (I directly asked for this well over 12 months ago, and was told by Nail that it would be simple to impliment, and would be), as not been added. Within that post was also a request for the ability to filter routed traffic (gateway).
I really dont think Jetico are looking at this thread, or they simply ignore...... They will do this at thier own peril

[Wat0114]

no plugins
no shiny worthes stuf
no nothing stupid what kidy wants

Agreed

and jetico2 uncomfortable.. waiting for future version coz now i dont like it.. etas more ram hmn and have small stability isues.. why ? jetico1 is more stable..
.

I disagree about J2 eating too much RAM. On my XP box it runs very light and stable < 20 Mb working set and < 10 Mb private bytes. Excellent! That said, if it is unstable for some, especially those running Vista, then it should be fixed, of course.

[Aureliano Buendía]

Colum width should be customizable in each node: now the same width it is applied to all nodes.

Ciao.