Hacker News Reader

Comment by AdmiralAsshat | Hacker News Reader

Wow, that's disconcerting. Different product, but I'm almost tempted to uninstall the Comodo Firewall that's running on my Windows laptop out of fear that there's some other blatant security blunder waiting to be exploited.

Anyone have any suggestions for a free firewall alternative?

View on HN

Are you using Windows? What's wrong with the Built-in Advanced Firewall?

Pretty much this. I stopped using Comodo when the built in Firewall was "good enough" I did miss (briefly) the yay/nay for every connection that Comodo offered.

It's reasonable to assume Windows Firewall on Windows 10 prevents the user from manually blocking connections to Microsoft advertising and telemetry domains.

IMHO recent versions of Windows (7+) are best left with Windows Firewall and Defender.

> I noticed their scan process is not using ASLR

You can be pretty sure that none of their software is fit for purpose if they're not using basic protections for a process which runs as a super user and parses every file it can find.

I think you have an extra "not" in there; it's hard to parse anyway.

https://www.glasswire.com/ is pretty good, not 100% sure how expensive it is but I believe there is a free version.

> Anyone have any suggestions for a free firewall alternative?

pf on OpenBSD. Strong firewall, highly configurable, the syntax isn't bad, and there are even some decent books out on it.

I've heard people running pf in a vm which their main OS talks to the rest of the world through.

Sounds interesting but personally I'm sure I would get it wrong.

*BSD (especially OpenBSD) is hard to get right in general, but configuring firewall there is a pure joy for some reason.

I recommend Glasswire, it's a gui for the Windows firewall with a beautiful interface. It could be better, but is quite useful.

Reply on news.ycombinator.com