>>Here are some lame examples...
>>http://www.hnc3k.com/bypass_blackicedefender_zonealarm.htm
>>http://www.securiteam.com/securitynews/Multiple_weaknesses_found_in_ZoneAlarm.html
>>heck even firecracker kills it...
>>http://www.megasecurity.org/Firewalls/Firecracker.html
>>http://www.pestpatrol.com/PestInfo/db/f/firecracker_2_0.asp
>>
>>There are a lot of other ways to get around zonealarm but this prolly isnt the best place to discuss it..
>
>You're right; these are "lame" examples.
>
>These are trojan horses and have nothing to do with the firewall per se.
>
>It's the job of virus detection software, and NOT the firewall, to identify trojan horses and the like that are *already* in the system ... likely downloaded explicitly by the User and not due to some weakness in the firewall.

Ok the problem (in a nutshell) is that it is way to easy to modify the firewall rules without your knowledge. I mean you could even make something and name it iexplorer.exe and have it do stuff on port 80 yer firewall would be oblivious to it.