Port Forwarding

[bpatters69]

Hello folks,

I just installed DC++ file sharing program. Part of the set-up requires that I configure my router to allow UDP and TCP. I have everything working and I selected one of the ports that DC++ uses. My questions is does using port forwarding pose a greater security concern?

As a second question, since my external IP address changes, will I constantly have to update DC++ with the new external IP address as the external IP address changes over time?

Thanks, Bill

 

[n0cmonkey]

Yes, the security concerns of a forwarded port are greater than those of a non-forwarded port.

 

[bpatters69]

Is port forwarding a necessary evil if I want to file share? Is there anything I should do to make sure that I am as secure as I can be?

I have a Netgear Router and Norton Firewall with Virus protection

 

[Nothinman]

It's a security concern in that you're allowing unprotected direct connections (no pun intended) to your PC and if there's ever an exploit for the listening application they can break into your PC and bypass your router completely.

 

[bpatters69]

Originally posted by: Nothinman
It's a security concern in that you're allowing unprotected direct connections (no pun intended) to your PC and if there's ever an exploit for the listening application they can break into your PC and bypass your router completely.

All of the comments so far make sense. Is there anything further I can do to protect my PC? Like I said, I am using Norton Firewall and a Netgear hardware firewall.

Any other pointers?

 

[Nothinman]

To make DC++ work properly you need to basically bypass the firewalls, so no. Obviously if you leave your virus scanner on all the time it'll catch any viruses you download but if there's a problem with DC++ it's hit or miss whether you catch it or not.

 

[Rainsford]

Am I the only person who wishes application writers would stop writing software that needs listening ports to accept new connections? Many times it's totally unnecessary, and yet it's "easy" so everyone does it. I hope with the dramatic rise in firewalls that people don't want to mess with, that programmers will stop doing it.

 

[n0cmonkey]

Originally posted by: Rainsford
Am I the only person who wishes application writers would stop writing software that needs listening ports to accept new connections? Many times it's totally unnecessary, and yet it's "easy" so everyone does it. I hope with the dramatic rise in firewalls that people don't want to mess with, that programmers will stop doing it.

Out of curiosity, what is your proposed solution?

 

[Nothinman]

Am I the only person who wishes application writers would stop writing software that needs listening ports to accept new connections? Many times it's totally unnecessary, and yet it's "easy" so everyone does it. I hope with the dramatic rise in firewalls that people don't want to mess with, that programmers will stop doing it.

When you have 2 peers behind firewalls how are they supposed to establish a connection without a listener on one side?

 

[bpatters69]

Originally posted by: Nothinman
To make DC++ work properly you need to basically bypass the firewalls, so no. Obviously if you leave your virus scanner on all the time it'll catch any viruses you download but if there's a problem with DC++ it's hit or miss whether you catch it or not.

So using Port Forwarding is something I have to live with if I want to share files across the net.

Thanks, Bill