Possible to approve individual packet?

H

Hvatum

Gawd
Joined
Apr 21, 2005
Messages
882
Is there are firewall that allows you to approve each packet which is incoming? I realize it seems kind of extreme, but this is for a machine that wouldn't be doing any web browsing so approving a new packet for each web page loaded wouldn't really be an issue. The only packets would be when someone is specifically trying to load a secure file AND somone is on the computer to approve the transfer. This seems like it would be the ultimate security but I'm not sure if such a thing exists.
 
You realize that webpages consist of more than one packet right?

You could deny all web traffic except those specifically whitelisted on a proxy or gateway firewall.
 
aaronearles said:
You realize that webpages consist of more than one packet right?

You could deny all web traffic except those specifically whitelisted on a proxy or gateway firewall.
Click to expand...

This is for a computer that WON'T be doing any web browing ;)
 
With standard ethernet, a packet is a max of 1500 bytes. Most firewalls work by allowing or denying the packets to start a connection, and letting through any packets for an already-established connection (because the packets that started the connection have already been checked).

I don't think you really want to be prompted about every single 1.5KB packet. Figuring in overhead, that would be like 700 packets per megabyte transferred.
 
Theres all sorts of other standard packets that go on in the background (ARP, etc) that this is not a feasible solution.

Just setup a very detailed set of firewall rules that only allow certain traffic.

Encrypt the file using truecrypt, and a long password then you don't need to be as paranoid about every network packet.
 
sounds like you would be better off with some sort of access control list.
 
I haven't used Comodo Firewall in a long time, but the default for it was to manually prompt the user for each connection, both incoming and outgoing. You had to make certain rules (like for DNS) unless you wanted to be prompted every 5 seconds.
 
Hvatum said:
This seems like it would be the ultimate security but I'm not sure if such a thing exists.
Click to expand...

the ultimate security is physically unplugging your computer from the internet. this is actually more secure, and more realistic then what you propose, if you are looking for "ultimate security".
 
You must log in or register to reply here.
Back
Top