setting up a firewall

[Pete]

I have a DSL line through my local phone company. However
I normally connect to the internet through my D-Link 614+
router.

Does it make sense to enable the WinXP firewall if I am
using a router to connect to the internet?

I spoke to D-link and they implied that the security
provided with their router is sufficient and I didn't
need an additional firewall.

I was curious if anyone had some input on how to best
protect my PC from viruses (other than using Virus
software)

Any input would be appreciated!

Thanks

 

[Ron Sommer]

The router will block most unwanted incoming traffic.
The XP firewall also blocks unwanted incoming traffic.
What is needed is a firewall that also blocks unwanted outgoing traffic.
The XP firewall only blocks incoming traffic.
The free version of ZoneAlarm blocks outgoing traffic, but you have to
choose the programs that need access.

 

[Kevin]

If D-Link tech support has given you their assurance that the router will
stop all unauthorized traffic both into and out of your system, then take
them at their word. Then install Zone Alarm and AVG Anti-Virus, both free
by the way, and update them regularly. Do not allow your machine to connect
without the protection of a firewall or anti-virus application. It only
takes a few minutes of exposure, unprotected, to infect the system.

 

[davetest]

I have a DSL line through my local phone company. However
I normally connect to the internet through my D-Link 614+
router.

Does it make sense to enable the WinXP firewall if I am
using a router to connect to the internet?

I spoke to D-link and they implied that the security
provided with their router is sufficient and I didn't
need an additional firewall.

I was curious if anyone had some input on how to best
protect my PC from viruses (other than using Virus
software)

Any input would be appreciated!

Thanks

The addition of a software firewall has other benefits.
It will tell you if any software from within your computer
is trying to contact the internet. That's a good way of finding
trojans and other spyware or malware.

Other items of interest are the port scan (shields-up) at
www.grc.com This will scan common ports on your machine and give
you a risk analysis.

For general advice, do not hide "extensions for known filetypes"
it only invites trouble. If you hide them, you might think
you're opening SCAN.JPG, but it turns out to be SCAN.JPG.EXE. Now
you're infected.

If you are not using any hardware that supports UPNP,
(some routers do, I believe)
disable these services - SSDP and Universal plug and play.
Also disable MESSENGER.
Apply all Microsoft critical updates.
Install the spyware detectors ad-aware 6.x and spybot search and
destroy.
Also consider a second browser. The mozilla firebird has a very small
footprint, it's fast, and doesn't have the OCX/activex vulnerabilities
that IE6 has. http://www.mozilla.org/products/firebird/
I keep it around for occasional use - particularly if there's a
chance of visiting some dubious sites.

Dave


Dave