Does anybody know if there is a tool (application) that can generate and read Windows Vista firewall logs?
I’ve found something, but not what I’m looking for:
[i]If you are using the Windows Firewall to protect your computer and network, you can enable security logging. The default location for the firewall log is the %systemroot%\system32\LogFiles\Firewall\pfirewall.log folder. However, if you do not want to file stored in this location, you can easily change it.
* Click Start | All Programs | Administrative Tools | Windows Firewall with Advanced Security.
* Click Windows Firewall Properties.
* Select the appropriate profile tab: Domain Profile, Private Profile or Public Profile.
* Click the Customize button under the Logging section.
* Within the Name field, type in the new path and file name.
* Click OK.
* Click OK to save your changes.[/i]
But manipulating the logs…
2007-11-12 17:59:34 ALLOW TCP 127.0.0.1 127.0.0.1 53663 2373 0 - 0 0 0 - - - SEND
2007-11-12 17:59:34 ALLOW TCP 127.0.0.1 127.0.0.1 53663 2373 0 - 0 0 0 - - - RECEIVE
2007-11-12 17:59:35 ALLOW TCP 127.0.0.1 127.0.0.1 53664 12080 0 - 0 0 0 - - - SEND
2007-11-12 17:59:35 ALLOW TCP 127.0.0.1 127.0.0.1 53664 12080 0 - 0 0 0 - - - RECEIVE
You can’t see which application is trying to connect…
Another reason (besides infection) to block outbound connections in Windows: avoid GiveAwayOfTheDay updates… you’ll lose your free shareware ![]()
Still looking for a better (easier) solution than only Vista firewall.
avoid GiveAwayOfTheDay updates...After you install one of their programs. Disable auto updates for that program. You could also try installing these programs to a folder other than the default to alert you to not check these programs for updates.
Hey Tech, The only thing I could find is shareware ($20.00) and I haven’t tried it so I don’t know how well it works.
I won’t test… the 20 bucks won’t worth…