Welcome to Smokey's Security Forums.
Guests have only limited access to the board and it's features, please consider registering to gain full access!
Registration is free and it only takes a few moments to complete.

Smokey's Security Forums

Please login or register.

Login with username, password and session length
Advanced search  

News:

Smokey's Security Forums now a member of:
AQMRB - Alliance of Qualified Malware Removal Boardsâ„¢

   AQMRB - Alliance of Qualified Malware Removal Boardsâ„¢

Multilingual OTL (OldTimer ListIt) Log Analysis * Multilingual OTL Tutorials * OTL Downloads * Malware Removal * Microsoft Security Info & Alert Center * Official Jetico Inc. Support Forums

Share this topic on FacebookShare this topic on MySpaceShare this topic on Del.icio.usShare this topic on DiggShare this topic on RedditShare this topic on StumbleUponShare this topic on TwitterAuthorTopic: JPF and Windows 7 BFE  (Read 1054 times)

0 Members and 1 Guest are viewing this topic.

freakensteinTopic starter

  • Full Member
  • **
  • Offline Offline
  • Posts: 12
Re: JPF and Windows 7 BFE
« Reply #3 on: December 25, 2009, 08:12:41 PM »
For those who are interested:

BFE is key component of Windows Vista/7 Filtering Platform. Microsoft forces firewall vendors to use it. Some critical information can be retreived via WFP/BFE only.

JPF uses WFP functions for application layer filtering and if you stop BFE the application layer will be turned off.

Some firewalls simply mark their component as dependent from BFE service and don't start at all when BFE is turned off.

JPF's network and process attack layers can work without BFE and so JPF is not stopped when BFE is inactive.

There are no specific notifications about a turned of BFE service because JPF can control an access to the Service Control Manager. It produces and processes the "access to system services" event.

Tommy

  • Jetico Forums Team Leader
  • Administrator
  • *
  • Offline Offline
  • location: Buenos Aires - München
  • Posts: 1105
  • .: Stranger in the night
    • WWW
Re: JPF and Windows 7 BFE
« Reply #2 on: December 22, 2009, 01:31:57 AM »
Not using Win 7, but i will inform Nail about this thread.

freakensteinTopic starter

  • Full Member
  • **
  • Offline Offline
  • Posts: 12
JPF and Windows 7 BFE
« Reply #1 on: December 22, 2009, 12:43:12 AM »
Hi,
just found out that JPF 2.1.x.x silently stops filtering correctly on my Windows 7 (Enterprise EN 32 Bit build 7600) when I stop the Windows Base Filtering Engine service.

JPF keeps running but the "Applications" tab sheet is empty and no applications are filtered anymore.

Don't know if anyone else can confirm this for his system, too ?!

Regards
 

* Permissions
You can't post new topics.
You can't post replies.
You can't post attachments.
You can't modify your posts.
 BBCode Enabled
Smilies Enabled
[img] Enabled
HTML Disabled


Except where otherwise stated, all content © 2006 - 2010 Smokey Services™ -- All rights reserved
Design of all board graphics, banners and images by Emma aka Tinker - © 2006 - 2010 Smokey Services™ -- All rights reserved
Smokey's Security Forums is member AQMRB - Alliance of Qualified Malware Removal Boardsâ„¢, an organisation of Approved Qualified Malware Removal Help & Support Boards
Member ASAP - Alliance of Security Analysis Professionalsâ„¢

    

  

Smokey's provide fully qualified OTL (OldTimer ListIt) Log Analysis & Malware Removal services in English, German and Spanish language