ICF and PPPoE DSL connection

[csp122]

With a PPPoE DSL Internet connection, I have the option of
enabling the ICF on both the physical LAN adapter as well
as the PPPoE connection... which offers the best
security, and are there any drawbacks to enabling the ICF
on one, or both?

Thanks.

 

[Wesley Vogel]

MS's XP firewall isn't a very good one.

Use the Internet Connection Firewall
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Internet Firewalls
http://www.microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp

ZoneAlarm
http://www.zonelabs.com/store/content/home.jsp

 

[Marc Reynolds [MSFT]]

"MS's XP firewall isn't a very good one."

I disagree. Internet Connection Firewall will protect your computer as well
as any firewall out there. When you buy a 3rd party firewall you are paying
for more functionality and configuration options. Many people want more
functionality than what ICF provides. However, many people also just want to
be able to turn on a firewall and know that there computer is reasonably
protected. For these people ICF is the best option.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.

 

[Wesley Vogel]

Marc;
You use what you want. ) I'm using Zone Alarm (Free version).
Expert Zone columnist Tony Northrup is an Internet engineer, a part-time
photographer, and author of dozens of books and articles. He writes to help
people safely use the Internet to communicate, share, and learn.

From Tony Northrup:
[ICF is designed to provide basic intrusion prevention, but doesn't include the
rich features of a third-party firewall application. Most third-party firewalls
protect you from software that may violate your privacy or allow an attacker to
misuse your computer-features not found in ICF.]

 

[Larry Samuels]

As Marc stated, ICF will protect your pc as well as any firewall out
there---from incoming attacks. It does nothing to prevent malware you have
enabled on your pc from making outgoing connections.

By that point it doesn't matter--if the malware is present and trying to
call out, your pc no longer belongs to you anyway.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Marc;
You use what you want. ) I'm using Zone Alarm (Free version).
Expert Zone columnist Tony Northrup is an Internet engineer, a part-time
photographer, and author of dozens of books and articles. He writes to
help
people safely use the Internet to communicate, share, and learn.

From Tony Northrup:
[ICF is designed to provide basic intrusion prevention, but doesn't
include the
rich features of a third-party firewall application. Most third-party
firewalls
protect you from software that may violate your privacy or allow an
attacker to
misuse your computer-features not found in ICF.]

--
Hope this helps. Let us know.
Wes

In

"MS's XP firewall isn't a very good one."

I disagree. Internet Connection Firewall will protect your computer as
well
as any firewall out there. When you buy a 3rd party firewall you are
paying
for more functionality and configuration options. Many people want more
functionality than what ICF provides. However, many people also just want
to
be able to turn on a firewall and know that there computer is reasonably
protected. For these people ICF is the best option.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no
rights.

 

[Wesley Vogel]

Hello Larry;
What are you using for a firewall?

Wes

In

As Marc stated, ICF will protect your pc as well as any firewall out
there---from incoming attacks. It does nothing to prevent malware you have
enabled on your pc from making outgoing connections.

By that point it doesn't matter--if the malware is present and trying to
call out, your pc no longer belongs to you anyway.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Marc;
You use what you want. ) I'm using Zone Alarm (Free version).
Expert Zone columnist Tony Northrup is an Internet engineer, a part-time
photographer, and author of dozens of books and articles. He writes to
help
people safely use the Internet to communicate, share, and learn.

From Tony Northrup:
[ICF is designed to provide basic intrusion prevention, but doesn't
include the
rich features of a third-party firewall application. Most third-party
firewalls
protect you from software that may violate your privacy or allow an
attacker to
misuse your computer-features not found in ICF.]

--
Hope this helps. Let us know.
Wes

In

"MS's XP firewall isn't a very good one."

I disagree. Internet Connection Firewall will protect your computer as
well
as any firewall out there. When you buy a 3rd party firewall you are
paying
for more functionality and configuration options. Many people want more
functionality than what ICF provides. However, many people also just want
to
be able to turn on a firewall and know that there computer is reasonably
protected. For these people ICF is the best option.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no
rights.


MS's XP firewall isn't a very good one.

Use the Internet Connection Firewall
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Internet Firewalls

http://www.microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp

ZoneAlarm
http://www.zonelabs.com/store/content/home.jsp
--
Hope this helps. Let us know.
Wes

In csp122 <[email protected]> hunted and pecked:
With a PPPoE DSL Internet connection, I have the option of
enabling the ICF on both the physical LAN adapter as well
as the PPPoE connection... which offers the best
security, and are there any drawbacks to enabling the ICF
on one, or both?

Thanks.

 

[Larry Samuels]

Hi Wesley,

Hardware firewall (NAT router) and ICF 2 .
I am running XP SP2 as part of the beta.

My main server runs the original ICF on the WS2K3 SP1 beta.

Yes--I eat my own dogfood <G> Any decent network admin views a compromised
machine as untrustworthy and reloads it if it is compromised. An outbound
firewall serves no purpose other than as an alert the machine is suspect and
should be wiped.

This view is not popular among home users, mainly because few maintain
regular backups so they can recover easily.

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Hello Larry;
What are you using for a firewall?

Wes

In

As Marc stated, ICF will protect your pc as well as any firewall out
there---from incoming attacks. It does nothing to prevent malware you
have
enabled on your pc from making outgoing connections.

By that point it doesn't matter--if the malware is present and trying to
call out, your pc no longer belongs to you anyway.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Marc;
You use what you want. ) I'm using Zone Alarm (Free version).
Expert Zone columnist Tony Northrup is an Internet engineer, a
part-time
photographer, and author of dozens of books and articles. He writes to
help
people safely use the Internet to communicate, share, and learn.

From Tony Northrup:
[ICF is designed to provide basic intrusion prevention, but doesn't
include the
rich features of a third-party firewall application. Most third-party
firewalls
protect you from software that may violate your privacy or allow an
attacker to
misuse your computer-features not found in ICF.]

--
Hope this helps. Let us know.
Wes

In Marc Reynolds [MSFT] <[email protected]> hunted and pecked:
"MS's XP firewall isn't a very good one."

I disagree. Internet Connection Firewall will protect your computer
as
well
as any firewall out there. When you buy a 3rd party firewall you are
paying
for more functionality and configuration options. Many people want
more
functionality than what ICF provides. However, many people also just
want
to
be able to turn on a firewall and know that there computer is
reasonably
protected. For these people ICF is the best option.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no
rights.


MS's XP firewall isn't a very good one.

Use the Internet Connection Firewall
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Internet Firewalls

http://www.microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp

ZoneAlarm
http://www.zonelabs.com/store/content/home.jsp
--
Hope this helps. Let us know.
Wes

In csp122 <[email protected]> hunted and pecked:
With a PPPoE DSL Internet connection, I have the option of
enabling the ICF on both the physical LAN adapter as well
as the PPPoE connection... which offers the best
security, and are there any drawbacks to enabling the ICF
on one, or both?

Thanks.

 

[Wesley Vogel]

Hi Larry;
<LOL>
Thanks for the replies.
I was just curious what you would have to say.
"Hardware firewall" seem to be the key words here.
Strong Heart dog food? )


Wes

In

Hi Wesley,

Hardware firewall (NAT router) and ICF 2 .
I am running XP SP2 as part of the beta.

My main server runs the original ICF on the WS2K3 SP1 beta.

Yes--I eat my own dogfood <G> Any decent network admin views a compromised
machine as untrustworthy and reloads it if it is compromised. An outbound
firewall serves no purpose other than as an alert the machine is suspect and
should be wiped.

This view is not popular among home users, mainly because few maintain
regular backups so they can recover easily.

--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Hello Larry;
What are you using for a firewall?

Wes

In

As Marc stated, ICF will protect your pc as well as any firewall out
there---from incoming attacks. It does nothing to prevent malware you
have
enabled on your pc from making outgoing connections.

By that point it doesn't matter--if the malware is present and trying to
call out, your pc no longer belongs to you anyway.


--
Larry Samuels MS-MVP (Windows-Shell/User)
Associate Expert
Unofficial FAQ for Windows Server 2003 at
http://home.earthlink.net/~larrysamuels/WS2003FAQ.htm
Expert Zone -

Marc;
You use what you want. ) I'm using Zone Alarm (Free version).
Expert Zone columnist Tony Northrup is an Internet engineer, a
part-time
photographer, and author of dozens of books and articles. He writes to
help
people safely use the Internet to communicate, share, and learn.

From Tony Northrup:
[ICF is designed to provide basic intrusion prevention, but doesn't
include the
rich features of a third-party firewall application. Most third-party
firewalls
protect you from software that may violate your privacy or allow an
attacker to
misuse your computer-features not found in ICF.]

--
Hope this helps. Let us know.
Wes

In Marc Reynolds [MSFT] <[email protected]> hunted and pecked:
"MS's XP firewall isn't a very good one."

I disagree. Internet Connection Firewall will protect your computer
as
well
as any firewall out there. When you buy a 3rd party firewall you are
paying
for more functionality and configuration options. Many people want
more
functionality than what ICF provides. However, many people also just
want
to
be able to turn on a firewall and know that there computer is
reasonably
protected. For these people ICF is the best option.


--

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no
rights.


MS's XP firewall isn't a very good one.

Use the Internet Connection Firewall
http://www.microsoft.com/windowsxp/pro/using/howto/networking/icf.asp

Internet Firewalls

http://www.microsoft.com/windowsxp/expertzone/columns/northrup/02august12.asp

ZoneAlarm
http://www.zonelabs.com/store/content/home.jsp
--
Hope this helps. Let us know.
Wes

In csp122 <[email protected]> hunted and pecked:
With a PPPoE DSL Internet connection, I have the option of
enabling the ICF on both the physical LAN adapter as well
as the PPPoE connection... which offers the best
security, and are there any drawbacks to enabling the ICF
on one, or both?

Thanks.

 

[Kent W. England [MVP]]

With a PPPoE DSL Internet connection, I have the option of
enabling the ICF on both the physical LAN adapter as well
as the PPPoE connection... which offers the best
security, and are there any drawbacks to enabling the ICF
on one, or both?

Isn't it interesting how easily distracted are some folks?

As far as answering your original question, enabling the firewall on the
LAN adapter will provide NO protection for your DSL connection.

Enable the firewall (whichever firewall YOU choose) on the PPPoE connection.

 

[csp122]

Enable the firewall (whichever firewall YOU choose) on
the PPPoE connection.

Kent... thanks for the information.

Everybody else... thanks for the lively discussion! I
guess that I should look into deploying both ICF and a
network firewall device.

Thanks again!

-csp122