The latest updates and information for CHX-I products will be posted here.NOTICE: BIND-PE has undergone a significant name change, and is currently called TreeWalk DNS.
Not an official CHX-I release, but a mix of some of their more recent sample filters with the original BIND-PE_Filters found elsewhere on this site: TW_ICS_Filters.zip (1.33 KB). The TW_3Lan_Filters.zip (1.88 KB) package has pre-defined filters for 3 common LAN address groups (which can be useful for laptops) and includes Inbound and Outbound
filters for 192.168.0.0, 192.168.1.0 and 192.168.2.0 LANs. There is one little twist however; this package is useful for a computer in a Linksys LAN, for example, and is set to the 192.168.1.0 address group which means appropriate Disabling and Enabling of specific rules is required when signing in to a LAN that uses a different Private Network address. So for the sake of simplicity, these have been further broken down as individual packages in addition to the TW_ICS_Filters.zip download,
for more specific LAN applicability as TW_Linksys_Filters.zip (1.35 KB) for 192.168.1.0 and TW_SMC_Filters.zip (1.34 KB) for 192.168.2.0 networks. This should assist with the easier concept of Deleting and Importing appropriate rules sets as needed, especially when more than one Network Adapter may be installed (such as a Wireless card in a notebook).
Proponents of packet filtering may wish to download all four filter sets as TW_All_Filters.zip (6.07 KB) for comparison. For even tighter internal LAN security you can adjust the "Force Allow" Priority to "Allow (Deny all except)" for both of the Inbound and the Outbound filters for the particular address group that you may need to incorporate for inclusion into a specific network.
Remember:any filters downloaded from this site are meant for example use only, may require editing if implemented, and should be disabled (or deleted) when not in use, even if this author uses them as they are! Further testing and additional security verifications are highly recommended.
Update:August 4, 2004:
CHX-I Packet Filter 2.8.1
New site design and more!
Past Update History
Update:March 2, 2004:
CHX-I Packet Filter 2.7.1 (Filter screenshot)
CHX-I NAT 1.1.1
Some very minor releases/fixes of chxpf/nat: Get updated or visit the CHX-I Support page
for more information. Also, see Notice below.
NoticeNovember, 2003:
'When performing Packet Filter upgrades on systems that are online, please take the necessary precautions in order to avoid worm infection. During the upgrade process the online system will be exposed for several seconds due to the Packet Filter driver upgrade. Within this time frame an unpatched OS can be compromised by worm activity.
When updating the packet filter you must follow these steps:
Disable any network interface (WAN/LAN).
Perform the upgrade.
Enable the network interface(s).
If performing the upgrade remotely you can unpack the msi, copy the files to their respective locations and launch a script that disables the network interfaces, restarts the Packet Filter driver and re-enables the network interfaces. All these operations can be performed via the CHX-I Remote Management Console (upload&execute).
