Tech Support > Computers & Technology > Internet & Broadband > Which firewall please.
Which firewall please.
Posted by Steve on July 12th, 2005


I am currently waiting for my line to be enabled for broadband and
wondered what firewall(s) are recommended by the group.
I have a dual boot pc with XP pro and Linux.
I mainly use Linux to go on line with my dial up connection however I
have heard that Linux and usb broadband modems (the type being sent by
my ISP) don`t seem to like each other so I might have to fall back to
my XP partition.
The odd time I use XP to go online I have the XP firewall enabled but
not sure how effective(?) that is (ie I hav`nt had any problems with it).
I plan to get a combined wireless router to use my laptop and read that
most of these have firewalls in them. Can you use the XP and router
firewalls together? is anything to be gained by doing this?
I know I stop using the usb modem when the router is installed.Should I
get that first and not bother with the modem at all?.
Reading some of the postings on this group has been a great source of
help so apologies if this post is blatantly obvious to some of you.
Cheers
Steve

Posted by poster on July 12th, 2005


On 11 Jul 2005 23:23 GMT, Steve <nospam@taverymuch.com> wrote:

I'm sure you can, but I tend to not touch the router's setup and just use
(a) the fact that NAT (Network Address Translation) blocks most incoming, and
(b) a software firewall, in my case an old free one, but there's Kerio.com v4
firewall for Windows (which has some extras when you pay and register it, but
drops to being a reasonable firewall after 30 days use, without any payment).

A software firewall may be used to block certain types of traffic (such as if
you want to block s/w from 'calling home' for updates/advertising) while the
firewall in the router is less likely to give quite the same control. I am
aware some 'nasties' will disable a firewall if they get chance, but still
don't know if there are any router-based firewalls which are likely to spot
the traffic and block it!

I'd suggest keeping the USB modem in its box as the combined ADSL modem/router
should give you peace of mind and be a doddle to get working, and will keep up
the connection even if you are booting from one to other OS. Get that first!

--

UK ADSL <http://tinyurl.com/5jpa4> - Happy to save cash with Plus.Net!!

Posted by Ian Cummings on July 12th, 2005


In message <bi36d1prtm9i5tobjo0euneth7vhq86stt@212.159.2.85>, poster
<us-mail@rocketmail.com> writes

Can I ask which one that is ?

I used ATGuard in the past, which I liked very much, but there are
issues with XP I believe.

Currently using Norton (came preinstalled on a new PC) but I don't
really like it, so any suggestions of a replacement appreciated.
--
Ian Cummings

Posted by poster on July 12th, 2005


On 12 Jul 2005 18:48, Ian Cummings wrote:

Well, I'm using Tiny Software's v2.15 firewall on this PC, but on some
I have used another variant, Kerio v2.15 (not the version number!) and
while they are similar, the Kerio allows you to save the set of rules,
while the Tiny allows remote access (so with suitable port forwarding,
I can help my sister keep her son's PC 'locked down'... if she wants
some additional application (or wants me to install same!) then it's
easy for me to go into the command mode and allow unmatched rules to
cause a pop-up alert on the PC, at which point we create a new rule.

When she's not around, I disable the alerts, so no 'allow this through'
can be done by her lad. It's not going to be foolproof forever, but a
side effect of him trying things 'friends' from school have suggested.

<http://www.321download.com/LastFreeware/> may be worth a look...
If they're no longer available, my reply-to mail address should work.

--

UK ADSL <http://tinyurl.com/5jpa4> - Happy to save cash with Plus.Net!!

Posted by Ian Cummings on July 12th, 2005


In message <mq78d1pdef2o3ff2gkq463lm139oc29mt2@usenet.plus.ne t>, poster
<us-mail@rocketmail.com> writes
[...]

Many thanks.
--
Ian Cummings

Posted by Gizmo on July 13th, 2005



"Steve" <nospam@taverymuch.com> wrote in message
news:zbDAe.30328$y86.6102@newsfe1-win.ntli.net...

Putting Microsoft in charge of your PC security is like putting Gary Glitter
in charge of child welfare !



Posted by Chip on July 13th, 2005


On Wed, 13 Jul 2005 16:41:59 +0100,it is alleged that "Gizmo"
<Gizmo@home.now> spake thusly in uk.telecom.broadband:

*SPLORF* , now imagining a Microsoft advertising slogan "Wanna be in
my gang?"

OnTopic: I use an old version of zonealarm in conjunction with the
firewall in the router, the firewall in the router is trusted to deal
with nefarious incoming packets, ZA deals with 'do you want to allow
NastyTrojanHorseSpywareThingy.exe to access the internet?'


--
Life is like a hot bath. It feels good while you're in it, but the
longer you stay in, the more wrinkled you get.
- Robbert Oustin

Posted by Steve on July 13th, 2005


Hi Chip
Which router do you use?. I want to get a wireless one soon for the laptop.
Cheers
Steve

Posted by Chip on July 13th, 2005


On Wed, 13 Jul 2005 19:19:43 GMT,it is alleged that Steve
<nospam@nospam.com> spake thusly in uk.telecom.broadband:

I use an eTec router, cheapo ADSL/Router combo, (The firmware and so
forth appears to be by connexant, so it's most likely just a badged
clone) but it doesn't do wireless. Many other's on this group have
more experience with wireless, but from what I have heard, various
linksys ones are considered good by many, they certainly have a
worldwide market share that's pretty enormous.

--
Life is like a hot bath. It feels good while you're in it, but the
longer you stay in, the more wrinkled you get.
- Robbert Oustin

Posted by Steve on July 13th, 2005



Yes I`ve heard that the linksys ones are good,will have to scan the mags
cos our local PC world only stocks the Belkin,the Netgears and I think
the BT ones. I`ve heard the Netgears are pretty good and have good buil
in firewalls.
Steve

Posted by Chip on July 13th, 2005


On Wed, 13 Jul 2005 19:34:48 GMT,it is alleged that Steve
<nospam@nospam.com> spake thusly in uk.telecom.broadband:

I only know about market share, and yes, netgear have a pretty high
share too. Word of warning about PC world, keep your receipt and if
something DOES go wrong, stand there and make lots and lots of noise
when they try to deny it's their problem <g>


--
Life is like a hot bath. It feels good while you're in it, but the
longer you stay in, the more wrinkled you get.
- Robbert Oustin

Posted by Steve on July 13th, 2005



Yep I know where you are coming from, had to do that meself in the past ;-(

Posted by poster on July 13th, 2005


On 13 Jul 2005 19:34 GMT, Steve <nospam@nospam.com> wrote:

Odd... A friend went into PC World (admittedly this was back in Feb
or March) and got the Linksys WAG54G (and USB and PCMCIA adaptors).
I think there were 4 brands on the shelves, all at 99.99 (while on
the web, they were priced 59.99, 69.99, 79.99 and 89.99 !) Might
be worth investigating delivery off the web service to your local
PC World if you want the Linksys (a brand of Cisco, I believe).

--

E-mail + files - 30 day free trial - <http://web.vfm-deals.com/runbox/>
Can be added as an MX record, so your domain mail gets stored safely,
with IMAP / POP / SMTP (not locked to port 25) facilities.

USENET news service ? <http://tinyurl.com/3rjw4> (plans from under US$5)

Posted by Steve on July 14th, 2005


poster wrote:
Steve

Posted by Stephen Stewart on July 14th, 2005



"Steve" <nospam@taverymuch.com> wrote in message
news:zbDAe.30328$y86.6102@newsfe1-win.ntli.net...
There's nothing to be gained from using the XP firewall in conjunction with
a hardware firewall as the XP firewall only protects against unrequested
incoming traffic.

Your hardware version will do more than this and is vastly more secure.

In theory this is sufficient however I'd recommend the use of a software
firewall (other than XP) that locks down applications which access the Net.
This acts as a failsafe in case a trojan or other unwanted malware manages
to evade your other defences (antivirus software etc.).

The software firewall will prevent the rogue program from connecting which
not only highlights the problem but may also give you the chance you need to
clean your machine before any malicious payload or other adverse
consequences materialise.

From the hardware point of view, what you need is a combined Router,
Firewall & ADSL modem which is what a lot of these devices are nowadays
anyway.

Assuming the router you choose has an ADSL modem built in then you will have
no need for the USB device.

For wireless networking I'd recommend you get a router that supports WPA
encryption as the older WEP encryption is easily hackable and very insecure.

If convenient it's better if one PC has a wired connection to the router as
this will enable you to configure the router settings and troubleshoot
problems if the wireless network is not up and running.

Firmware updates quite frequently also require a wired connection.

Hope this helps.


Stephen



Posted by Piers James on July 14th, 2005


This is the combination I use. ZoneAlarm (free version) combined with
firewall in the router.



SNIP>