FIRE WALLS

  • Thread starter Thread starter Guest
  • Start date Start date
Upon what do you base the information to only use Windows Firewall? Its only
does 1/2 the job.
 
My DSL company changed owners, and the new company provides firewalls with
their Modems--my Visioner (?? name) modem does not have a router in it. The
new company says they aren't replacing the modems for those of us on the
former company's plan--although the new company is offering the DSL to new
customers at a lower price--nice, eh?? Its Valor Telecom changed to
Windstream Communications (they're a mess, frankly).

Anyway, since I'm disabled, getting out to buy a router, etc is difficult,
so I downloaded the free version of Zone Alarm, and also use Spyblaster,
AdAware, and AVG, plus run utilities weekly or so now that I've been
informed I didn't need to do it daily (thank ya'all).
Is this sufficient? I did not turn off the XP Pro Windows Firewall--is that
all right? And, does a Router really only cost $25-$50?? I was told "about
$200." I only have one computer in my home office.

If not how do I do that?

ZA has popped up with a lot of "threats" within hours--I've checked them all
out using Allnet-tools.com/toolbox.htm (or something like that) and all the
IP addresses are from foreign sources (out of the country).

Thanks for your time and you advice.
 
You order a router on-line from many places and have it
delivered. Office Max, Office Depot, Wal*Mart, CompUSA, the
list is long. Google and PriceWatch can find you prices and
suppliers.

With only one computer, you can certainly get by without a
router [the NAT feature serves as a firewall] but with a
router you can add more computers in different rooms or in a
central computer room. Can be nice and keeps your old
computer working for back-up and testing.


| My DSL company changed owners, and the new company
provides firewalls with
| their Modems--my Visioner (?? name) modem does not have a
router in it. The
| new company says they aren't replacing the modems for
those of us on the
| former company's plan--although the new company is
offering the DSL to new
| customers at a lower price--nice, eh?? Its Valor Telecom
changed to
| Windstream Communications (they're a mess, frankly).
|
| Anyway, since I'm disabled, getting out to buy a router,
etc is difficult,
| so I downloaded the free version of Zone Alarm, and also
use Spyblaster,
| AdAware, and AVG, plus run utilities weekly or so now that
I've been
| informed I didn't need to do it daily (thank ya'all).
| Is this sufficient? I did not turn off the XP Pro Windows
Firewall--is that
| all right? And, does a Router really only cost $25-$50?? I
was told "about
| $200." I only have one computer in my home office.
|
| If not how do I do that?
|
| ZA has popped up with a lot of "threats" within
hours--I've checked them all
| out using Allnet-tools.com/toolbox.htm (or something like
that) and all the
| IP addresses are from foreign sources (out of the
country).
|
| Thanks for your time and you advice.
|
in message
| | > Some bits of info...
| > Doing software installations often suggest that you shut
the
| > anti-virus off and the firewall, and spyware detection
apps,
| > too.
| >
| > Yes DSL and cable are both broadband, always ON
connections.
| > There are nasty bot programs and Trojans on the Internet
| > just looking for an unprotected computer.
| >
| > Even though a $25-50 router is not as good a hardware
| > firewall as is possible, it is enough to project the
| > connection. I run the free version of Zone Alarm and
also
| > have a router. The router also allows you to connect
more
| > than one computer to your DSL/cable and fully share the
| > connection and surf, email and download on both at the
same
| > time.
| >
| >
| >
| > | > | In article <#[email protected]>,
| > | (e-mail address removed) says...
| > | > Please explain why one needs a router with broadband
| > Internet access...does
| > | > than include DSL?? What, and why, how, and when?
| > |
| > | First, don't be confused by what some vendors call a
| > firewall when it's
| > | really just a fancy NAT Router. NAT Routing is the
minimum
| > that you want
| > | to protect your network, and it's very effective at
| > blocking unsolicited
| > | inbound connections, but it does nothing about
outbound
| > and most can't
| > | do anything about content checking and even fewer know
the
| > difference
| > | between HTTP and port 80 traffic.
| > |
| > | If you have ANY internet connection, even for a single
PC,
| > that provides
| > | a network/USB connection, then you need a NAT Router
(at
| > the minimum),
| > | to protect your PC.
| > |
| > | If you have Dial-Up, they don't make Dial-Up NAT
routers
| > any more, at
| > | least not that I can find, but you need some form of
| > personal firewall
| > | software, even for Dial-Up.
| > |
| > | I like the DFL-700 from D-Link, but it's not cheap,
but
| > it's as close to
| > | a real firewall as you can get without spending $450,
it
| > runs about $265
| > | depending on your country/location.
| > |
| > | At the very least, a BEFRS41 from Linksys or other
cheap
| > (under $80) NAT
| > | router, often called a firewall by idiot marketing
| > departments, will do
| > | for your non-business, non-secure, solution.
| > |
| > | This is just the first step, you also need to follow
basic
| > security
| > | methods, like not using IE, not running as an
| > Administrator level
| > | account, not opening attachments in emails, not
opening
| > files on
| > | websites, not opening attachments when they appear to
be
| > from someone
| > | you know (as they might be sent from a virus on your
| > friends
| > | machine)....
| > |
| > |
| > |
| > | --
| > |
| > | (e-mail address removed)
| > | remove 999 in order to email me
| >
| >
|
|
 
Pappion said:
Upon what do you base the information to only use Windows Firewall? Its
only does 1/2 the job.

If you don't get infected why do you need outgoing protection?
 
If you don't get infected why do you need outgoing protection?

And if you do get infected and have a firewall that limits outbound
connections, the infection may not be able to contact home for more
instructions - and it trying to contact home may also alert the firewall
administrator of the infected machine inside the LAN.

As a general rule, allow outbound only for what is specifically needed
and only to what is required, do not allow unlimited/unrestricted
outbound, or inbound, access - this should be the default rule always.
 
P. Johnson said:
Just use Windows Firewall. Playing around with anything else is just snake
oil.


Nonsense! Why would you say such a thing? Do you have a vested
interest in there being unsecured computers on the Internet?


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
Frank said:
If you don't get infected why do you need outgoing protection?

Are you for real? And you're claiming you're an MVP? IFF you're actually
an MVP and not a poser, you need your status revoked. And BTW, you don't
answer questions with questions; you answer them with answers. Dummy.
 
Pop` said:
Are you for real? And you're claiming you're an MVP? IFF you're actually
an MVP and not a poser, you need your status revoked. And BTW, you don't
answer questions with questions; you answer them with answers. Dummy.

I have been using computer since 1979. I have never been infected. I only
use the Windows firewall. I have an anti-virus and an anti-spyware running.
They never find anything. I repeat, if you're not infected what do you need
outbound protection for?
 
Frank said:
I have been using computer since 1979. I have never been infected.

In which case, when the MSBLAST worm came out you were running Windows
9x or if you were running an NT version you weren't connected to the
internet, or you manually blocked the opened ports to the worm.
I only use the Windows firewall. I have an anti-virus and an anti-spyware
running. They never find anything. I repeat, if you're not infected
what do you need outbound protection for?

We know that you are an experienced user, you know what is going on with
you computer. For the others who aren't so smart they should have
outbound protection and outbound notice of what is trying to access the
outside world. Unless you think that having things like Adobe,
Intellimouse and what not calling home once a month or sneaking around
in the background while you surf the net is a good thing.

John
 
John said:
In which case, when the MSBLAST worm came out you were running Windows
9x or if you were running an NT version you weren't connected to the
internet, or you manually blocked the opened ports to the worm.

That's not at all necessarily true. Remember, the hotfix that fixed
the pertinent vulnerability was released to the public just over a month
before Blaster hit the wild. All one needed to do to avoid that
particular threat was to keep one's system up-to-date.



--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
Frank said:
I have been using computer since 1979. I have never been infected. I only
use the Windows firewall. I have an anti-virus and an
anti-spyware running. They never find anything. I repeat, if you're
not infected what do you need outbound protection for?

I have used a computer since 1971, summer. I have never been "infected". I
have caught some attempts to infect, however. I have an antivirus and an
antispyware running, and three more in the toolkit that I run periodically
for GPs. They never find anything. I repeat, if you're an MVP you're
woefully misinformed and expect your own experiences/activities to be
mirrored by world. It just ain't so.


Feels like deja-vue here: What YOU do and what YOUR experience is today is
meaningless to the overall abilities of the internet community at large.
Because YOU have no problems is meaningless - unless you can convey YOUR
knowledge (which I tend to doubt, BTW) to the masses, you are being
singularly closed minded and ignorant of the real world out there.
It's pretty obvious IMO that you're not REALLY on the internet, never use
the web, and thus haven't really written this post; it's a figment of all
our imaginations.

The fact that you have av and as running is contradictory: If the firewall
protects you so well, why do you need those two? I have a recollection of
someone, I think you, claiming you didn't use those either, probably about a
year ago.

You're quite an enigma.

Pop
 
The fact that you have av and as running is contradictory: If the firewall
protects you so well, why do you need those two? I have a recollection of
someone, I think you, claiming you didn't use those either, probably about a
year ago.

Maybe the fact that a firewall has nothing to do with Viruses?

Maybe the fact that a firewall doesn't protect you from
files/malware/programs - only traffic that it sees?

We always install our solutions with a NAT or Firewall device so that
users can see what traffic is inbound and outboud, so that they can
understand if they've been compromised.
 
John John said:
In which case, when the MSBLAST worm came out you were running Windows 9x
or if you were running an NT version you weren't connected to the
internet, or you manually blocked the opened ports to the worm.


We know that you are an experienced user, you know what is going on with
you computer. For the others who aren't so smart they should have
outbound protection and outbound notice of what is trying to access the
outside world. Unless you think that having things like Adobe,
Intellimouse and what not calling home once a month or sneaking around in
the background while you surf the net is a good thing.

John

Not true. I was running WinXP with all updates and it did not hit me.
 
Leythos said:
Maybe the fact that a firewall has nothing to do with Viruses?

Welll, sort of, but is something tries something like zombieing your
machine, it's pretty handy to have the firewall stop the outgoing crap and
log it for finding. I can think of a few ways a firewall can help out re
virus, but you're absolutely right: A firewall is NOT intended for virus
protection; it's intended to control traffice.
We always install our solutions with a NAT or Firewall device so that
users can see what traffic is inbound and outboud, so that they can
understand if they've been compromised.

That's an excellent setup, actually. A NAT router and a software firewall
is a great combo and works very well.

Pop`
 
Frank said:
Not true. I was running WinXP with all updates and it did not hit me.

lol, WHAT didn't get you? You also neglected to mention the av and spyware
monitors you mentioned earlier, plus who knows what else? Enigma; that's
all you remind me of.

Pop`
 
Pop` said:
lol, WHAT didn't get you? You also neglected to mention the av and
spyware monitors you mentioned earlier, plus who knows what else? Enigma;
that's all you remind me of.

Pop`

The one John John mentioned in his post.
AV was AVG (probably - might have been E-Trust back then).
No anti-spyware. Also no spyware.
 
Back
Top