Firewall with router

[Drew]

I have a three computer home network linked with a Lynksys BEFSR41 V.2
router. My newest computer has winxp.

1. Should I enable the winxp firewall?

2. Will doing so cause any problems with the router or the other computers?

Drew

 

[Lanwench [MVP - Exchange]]

You should probably look into another software firewall product - the XP
firewall isn't meant to be used on a LAN connection. Your current router is
not doing stateful inspection - it isn't a firewall per se. Check out
ZoneAlarm, Sygate, BlackIce...or upgrade the Linksys to a model that does
more than just NAT and routing.

 

[Kevin Potts]

Norton Internet Security actually has a decent firewall with it, pretty easy
to configure, also, if Comcast is your ISP you can get a free year of
McAfee's firewall, it's not to bad either.

 

[Chris]

"Lanwench [MVP - Exchange]"

You should probably look into another software firewall product - the XP
firewall isn't meant to be used on a LAN connection. Your current router is
not doing stateful inspection - it isn't a firewall per se. Check out
ZoneAlarm, Sygate, BlackIce...or upgrade the Linksys to a model that does
more than just NAT and routing.

I understand that WinXP SP2 has great improvements in the built-in firewall

 

[CWatters]

I believe that model router has a firewall built in (most Routers do). In
which case, if all your PC connect to the internet through this router AND
you you don't need protection from the other users on your LAN - then I
wouldn't worry. Two firewalls can conflict sometimes.

You should however still run Antivirus S/W, Anti Spyware S/W and keep
Windows updated. A firewall isn't enough to protect you from viruses, trojan
horses, browser hijacks etc.

Colin

 

[Lanwench [MVP - Exchange]]

I believe that model router has a firewall built in (most Routers
do). In which case, if all your PC connect to the internet through
this router AND you you don't need protection from the other users on
your LAN - then I wouldn't worry. Two firewalls can conflict
sometimes.

FYI - that model isn't a SPI firewall - the comparable BEFSX41 is.

You should however still run Antivirus S/W, Anti Spyware S/W and keep
Windows updated. A firewall isn't enough to protect you from viruses,
trojan horses, browser hijacks etc.

You're quite right!

 

[Lanwench [MVP - Exchange]]

"Lanwench [MVP - Exchange]"

You should probably look into another software firewall product -
the XP firewall isn't meant to be used on a LAN connection. Your
current router is not doing stateful inspection - it isn't a
firewall per se. Check out ZoneAlarm, Sygate, BlackIce...or upgrade
the Linksys to a model that does more than just NAT and routing.

I understand that WinXP SP2 has great improvements in the built-in
firewall

Yes, it does, from what I hear. I still prefer to protect networks at the
perimiter - software firewalls perhaps as a second layer of defense.

 

[Benjamin Gay [MS]]

Hi Drew,
I take it that you are not running another firewall on the machine? If there
is no firewall on this machine then yes you should enable the Internet
Connection Firewall. The firewall should not effect the router. However with
that said you should be aware that you may have to add several port openings
depending on what applications you are running. To illustrate if you are
running a web server on your machine then you would want to open TCP:80 . If
you can be more specific with what applications/ communications is taking
place then I can assist you with this.

Regards

Benjamin Gay
Microsoft Windows Firewall Team

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Drew]

Hhanks for the reply -

I am not sure how to answer your question. My three computers are connected
to each other thru the router, which in turn, is connected to a cable modem.
The computers communicate with each other of course, but I have no special
communications software or configuration.

Thanks

Drew

 

[Lanwench [MVP - Exchange]]

The Internet Connection Firewall isn't designed for computers on
LANs....either get a better firewall to protect your network at the
perimeter or look into third party firewall software - ZoneAlarm is pretty
easy to use. Heck, you can do both!

 

[Alex Nichol]

You should probably look into another software firewall product - the XP
firewall isn't meant to be used on a LAN connection.

It will work well enough on a LAN type (Ethernet) connection to an
Internet cable modem. You should not usually use a firewall across a
LAN, just on the connection *from* the LAN to the outer world

 

[Bruce Chambers]

Greetings --

WinXP's built-in firewall is not designed to be used on internal
LAN connections. The _only_ connection on which you should have ICF
enabled is the direct connection to the Internet.

Internet Firewalls Can Prevent Browsing and File Sharing
http://support.microsoft.com/default.aspx?scid=kb;EN-US;298804


Bruce Chambers
--
Help us help you:



You can have peace. Or you can have freedom. Don't ever count on
having both at once. -- RAH

 

[K2NNJ]

What about using IPSec on WinXP Home and a NAT router?