Tech Support > Computers & Technology > Internet & Broadband > Is firewall software still needed?
Is firewall software still needed?
Posted by Mutley on January 9th, 2005


Hi, I have a router with an "inbuilt" firewall, does this mean I still need
say Norton Firewall installed or can I take it off as it seems to be hogging
CPU power and slowing the pc down.

Thanks

Pete


Posted by Peter M on January 9th, 2005


On 9 Jan 2005 in uk.telecom.broadband, "Mutley" wrote:

Best to have a firewall per PC. If Norton is slowing it down, *switch* to
a different one! Kerio.com has one, and there are others, for free (there
are older firewalls around, at <http://www.321download.com/LastFreeware/>
from Kerio and Tiny Software. The router firewall may not stop outgoing
traffic, which is why one per PC is better than none. Peter M.



--
PlusNet <http://tinyurl.com/24ymz> - I recommend them and save some cash.

My other ISP : UK Free Software Network <http://www.ukfsn.org>
UKFSN passes all profits to Free Software projects in the UK.

Posted by Mutley on January 9th, 2005



"Peter M" <us-mail@rocketmail.com> wrote in message
news:u8o2u0hj3s37ge3g63t648mr90ppmhoerb@4ax.com...
Will the Windows one be ok?



Posted by Tiscali Tim on January 9th, 2005


In an earlier contribution to this discussion,
Mutley <turismo(REMOVE)@dsl.pipex.com> wrote:

The only Windows one that's anywhere near ok is the one included in XP SP2.
Even then, many people say that you'd be better off with something like
ZoneAlarm. [The free version of this is ok].

--
Cheers,
Tim
______
Please reply to newsgroup. Reply address is invalid.



Posted by Peter M on January 9th, 2005


On 9 Jan 2005, in uk.telecom.broadband, "Mutley" wrote:

The Kerio site has their latest, which will be a full version for 30 days
(includes a pop-up blocker) but if you decide not to purchase, falls back
to basic firewall after that, though only going on what contacts have let
me know, since I've been using the older free ones from Kerio and Tiny on
the PCs I have here. Peter M.



--
PlusNet <http://tinyurl.com/24ymz> - I recommend them and save some cash.

My other ISP : UK Free Software Network <http://www.ukfsn.org>
UKFSN passes all profits to Free Software projects in the UK.

Posted by Mutley on January 9th, 2005



"Peter M" <us-mail@rocketmail.com> wrote in message
news:aqt2u01qvkfrel3a2qrud25ub2q5153as5@4ax.com...
How about Mcafee Firewall 6.0? my dads just got a new pc, but he doesn't use
the internet so it's mine if I want it.

I don't know how good mcafee is

Thanks



Posted by Spin Dryer on January 9th, 2005


On Sun, 9 Jan 2005 18:09:20 -0000, ["Mutley"
<turismo(REMOVE)@dsl.pipex.com>] said :-

The windows XP SP2 does not do outgoing.

Use free versions of Kerio, Sygate or ZA

Posted by Dave Stanton on January 9th, 2005



Would you really trust MS with anything involving security ?

Dave

--
For what we are about to balls up may common sense prevent us doing it
again
in the future!!

Posted by Oliver on January 9th, 2005


On Sun, 09 Jan 2005 18:39:18 +0000, Spin Dryer <me2@privacy.net>
wrote:

It will, however, warn if something tries to act as a server. I find
it adequate.

Oliver.

Posted by Conor on January 9th, 2005


In article <34daamF4aqe9pU1@individual.net>, says...
home, you won't know and it won't be blocked.


--
Conor

An imperfect plan executed violently is far superior to a perfect plan.
-- George Patton

Posted by Peter M on January 9th, 2005


On 9 Jan 2005 in uk.telecom.broadband, "Mutley" wrote:

Is there something "wrong" with the free ones like Kerio which people have
recommended ? You can try it for free, and compare with McAfee if you wish
(I've not tried that, I don't have a free source for it), and then tell us
all how *you* found they compare, perhaps. Peter M.

PS When quoting, it is recommended not to quote whole posts, amd to *trim*
a bit so that signatures etc aren't included, but would be done for you
with some non-MS news reader, such as Free Agent (www.forteinc.com)



--
PlusNet <http://tinyurl.com/24ymz> - I recommend them and save some cash.

My other ISP : UK Free Software Network <http://www.ukfsn.org>
UKFSN passes all profits to Free Software projects in the UK.

Posted by PhilT on January 9th, 2005


"does this mean I still need
say Norton Firewall installed "

no, you don't *need* a software firewall.

There are arguments for and against having one but necessity is
debateable.

Phil

Posted by I.J Jordan on January 9th, 2005



http://www.networkingfiles.com/Firew...alfirewall.htm

Ignore the 39 Dollars shareware fee as far as I am aware it is free for a
single user..... I have been using it for about 4 years and have not been
asked to send any money.

Couple it with "Kerio List Type 3" from here.

http://www.geocities.com/yosponge/checklist.html

not sure what "DNSKong" is but found I did not need it what ever it is

and you have a system where nothing gets in or out without your knowing.It is
a very long list of rules that is simple to load into Kerio. To make sure
thay have not missed anything the very last rule in the list is "Block
all"which has to be turned off to allow any programs that the software does
not know out,then when permission by you has been granted turn it on
again.... after moving the program up above "Block All"

Loke I said that is the set up I have been using for a number of years and it
has not let me down yet: no "bells & whistles" just a good solid workhorse.It
is currently working on Win XP Pro machine.

Just my thoughts

IanJ



--

Please Put out "The Fire" to reply via e-mail


Posted by Alex Heney on January 10th, 2005


On 9 Jan 2005 12:59:54 -0800, "PhilT" <newsnet@gmail.com> wrote:

Only if you don't like being reasonably secure.

It really is needed, the debate is only about which one to use.
--
Alex Heney, Global Villager
Murphy is out there... waiting...

To reply by email, my address is alexATheneyDOTplusDOTcom

Posted by John Laird on January 10th, 2005


On Sun, 9 Jan 2005 21:56:56 +0000, I.J Jordan <ian@sunhouse.plus.TheFirecom>
wrote:

A small DNS "server" which sits on your PC and refuses to look up dodgy
sites. You specify 127.0.0.1 as your name server and configure DNSKong with
the real ones.

--
A friend in need, always finds your new phone number.

Mail john rather than nospam...

Posted by Peter M on January 10th, 2005


On 9 Jan 2005, in uk.telecom.broadband, I.J Jordan wrote:

Oh, that gets you Kerio 2.1.4 while the link I gave earlier in the thread
will allow one to get both Kerio (2.1.5) and Tiny Software's version... I
thought at first your link was to some way to get a free version of v4 !!

See <http://www.321download.com/LastFreeware/> for Kerio and more :-)



--
PlusNet <http://tinyurl.com/24ymz> - I recommend them and save some cash.

My other ISP : UK Free Software Network <http://www.ukfsn.org>
UKFSN passes all profits to Free Software projects in the UK.

Posted by David Bradley on January 10th, 2005


On Mon, 10 Jan 2005 00:21:52 +0000, Alex Heney <me8@privacy.net> wrote:

In my statements below I am focusing on where a router firewall is installed and whether there is
any true benefit of having a Personal Firewall in addition.

Would it be possible for you to actually demonstrate how your software firewall has actually "saved
your bacon" from malicious outbound traffic, and not a belief that it has done a grand job?

I have seen many installations of very badly configured software firewalls that have actually
inhibited the auto updates of AV software and critical updates from MS. Would your average user know
that this applied to them?

If you inspected the configuration file, could you really say with your hand on your heart that you
actually understand the rule base that has been created? Mutually exclusive rules can be a brain
teaser.

So I through the gauntlet down: PROVE, beyond doubt, that they are really needed when a router
firewall is already in place. Consider only Broadband connections with no modem in the PC.

David Bradley



Posted by Tiscali Tim on January 10th, 2005


In an earlier contribution to this discussion,
David Bradley <trolley@spamless.co.uk> wrote:

On many occasions on my PCs, ZoneAlarm had detected that a program which
doesn't currently have permission to do so is trying to access the internet.
In all cases so far these have either been updated programs which *do* need
internet access - which I have then permitted - or programs which feel a
need to check for automatic updates - some of which I permit, and others I
don't.

When I tell ZoneAlarm to permit a program to access the internet, it
immediately does so - with no reference to the firewall in the router.

Whereas I am not aware that it has so far found anything malicious, what it
*has* done has given me confidence that it *would* catch a malicious program
if one got onto my PC. The router's firewall would not!
--
Cheers,
Tim
______
Please reply to newsgroup. Reply address is invalid.



Posted by David Bradley on January 10th, 2005


On Mon, 10 Jan 2005 10:17:17 -0000, "Tiscali Tim" <tele@privacy.net> wrote:

IMHO it is better to concentrate on what is getting *into* your computer rather than a belief that
*all* your outgoing traffic is being monitored for suspicious activity. I quote from a Silicon
article that appeared today:
---------------------
According to the NSW Police, the gang used adverts and spam to distribute malware that, once loaded
on a computer, could monitor the user's keystrokes and send any banking usernames and passwords back
to the gang's ringleaders.

A police spokesperson told silicon.com sister site ZDNet Australia that malware technology is
developing at an incredible rate so both users and internet security companies are having trouble
keeping up with the criminals.

"It doesn't matter how secure your computer is. The problem with Trojans is that the technology
develops so quickly," the spokesperson said.

Rob Forsyth, managing director of Sophos in Australia and New Zealand, agreed that users could never
be absolutely sure that their computer is Trojan-free. However, he said that by minimising the risks
it is possible to be relatively safe.
---------------------
As another contributor to this thread said: "it is better to have belt and braces"; true [but
unsightly], but suprisingly I certainly don't come across many people that use more than one AV
product on the same PC. And being topical, it is better to stop the water getting in first, rather
than the clear up operation afterwards.

Are all these so called personal firewalls really up to the job? What tolls are there to test their
effectiveness?

David Bradley




Posted by Tiscali Tim on January 10th, 2005


In an earlier contribution to this discussion,
David Bradley <trolley@spamless.co.uk> wrote:

You have clearly set your mind against software firewalls - and no amount of
evidence is going to convince you otherwise.

It's your choice!

[Of course your first line of defence should be AV software and a firewall
in your router. But this may not work! The article which you quoted said,
"It doesn't matter how secure your computer is. The problem with Trojans is
that the technology develops so quickly". A software firewall at least gives
a second line of defence in such cases.

Incidentally, people don't use more than one AV product because the can't
normally co-exist, but interfere with each other!]
--
Cheers,
Tim
______
Please reply to newsgroup. Reply address is invalid.