make sure Check marks are in:
Forbid Java
Forbid Adobe Flash
Forbid Microsoft Silverlight
Forbid other plugins
Forbid IFRAMES
everything else should be already set up. now this wont make you 100% immune to internet aids, but it sure as hell is like wearing a condom made out of protect/shell5 phalanx, stoneskin, and dread spikes.
I personally feel like this is going
too far and degrades internet experience since so many things use any number of the above features. A good browser, and a good firewall should be adequate for most things. After all, can you
really trust firefox any more than any of the above programs, I've read things about exploits with image viewers of all things (not gonna start disabling images on websites by default are we?). Also, thanks to xss attacks becoming so common whitelisting isn't secure either, you may allow qcdn to run javascript/iframes, but what happens when there's a xss hole discovered in VBulliten that gets used before qcdn can patch their version?
A simple solution if you have a newer computer is a virtual machine that'll run your browser. You can download VMware player, then download an ubuntu virtual appliance, and use its browser, pressing f11 to run your browser in "full screen" while the VM runs windowed works well.
What a virtual machine is, is software that emulates hardware, and lets another OS run on the emulated hardware, the OS has no idea it's not running on the real thing, it thinks it's actually the only thing in control of the hardware, while the VM software insures the client OS stays within its own little space, if an exploit got through firefox for example it'd first have to be targeted at linux, not windows (wanna guess how many ffxi password stealing exploits that attack linux there are? I bet it's about the same number of ffxi installations that run on linux, 0), and after gaining control over linux (not an easy feat, especially going over a browser) it must become aware it's in a VM, and then break the VM's security (VMware is very secure, another non-easy feat), and finally infect the host OS (an easy feat if you're running windows as an admin like 90% of people do =P ) and hope no firewalls stop you. In short, you're asking the malware to climb Mt everest wearing a T-shirt. It's not impossible, but I'd bet serious money against it happening =P.
Here is an example of what it would look like.
