[thelist] The case of a wayward app . . .

databarn databarn at airmail.net
Sun Sep 9 14:13:23 CDT 2001

Thanks, Bruce,

But that's not quite what I'm looking for.  (I do use ZoneAlarmPro as a firewall.)  If you've ever used Net Watcher with Win9x/NT, you'll see a scaled-down version of what this did.  Or perhaps you've seen some of the port scanning tools.  This app took those scans one step further by providing drill-down capability in real-time.  ZA doesn't quite manage that:  it allows or denies access on an application basis (Ok, you can filter IPs too, but that's not quite what's wanted here <grin!>.).  What this little app would allow was the ability to shut down one particular connection (like Net Watcher).  So, between the real-time reports of a particular machine's accesses (and excesses) and the disconnect capability, you could conceivably catch a hacker in the act and curtail that activity.  Not likely, but you _could_.  

The use I had for it was to close 'runaway' intranet applications, and to restrain a certain few connections that were automated download processes gleaning everything (every downloadable file) on the site.  (The downloading was not a problem, per se, but the automated processes blocked other users from normal site activities.)  Basically, it's just another site management tool, but in real-time.

Make a good day . . .
			 . . . barn
You can't kill yourself by holding your breath.
From:	Bruce Heerssen [bruce at heerssen.com]
Time:	9/9/2001 at 12:11PM

Hmmm... There is a program called ZoneAlarm, which is a personal
firewall. It does do most of what you are asking:

More information about the thelist mailing list