Running a Linksys Router along with ZoneAlarm

[Scaramouche]

Is there any advantage to running ZoneAlarm along with a Linksys BEFSR41 Cable/DSL router?

 

[Russ]

No.

Russ, NCNE

 

[Vicken]

yes, there is a small benefit, the router does not prevent any trojans from running in your network, but zone alarm does.

 

[Russ]

Vicken,

In order for a trojan to get in to the network, the hacker has to be able to find the computer through port scanning the IP address. With my router, you can scan till you drop, and it appears that my systems don't even exist. Not even a "connection refused" response, just nothingness.

Russ, NCNE

 

[paruhd0x]

How do you get Win2k Advanced Server NAT to do "nothingness" Russ? (Instead of connection refused). Or does it do that already?

 

[BCYL]

paruhd0x: It's the built-in firewall inside the router that do "nothingness," Windows by itself will refuse the connection at best.

 

[b0red]

Go to Shields UP! and probe your ports with only your router in dmz mode. It should show up closed in all ports. Now run the test again with router in dmz and zonealarm. It should show all stealth in all ports. Ah well...

 

[Russ]

b0red,

I don't use DMZ mode.

Russ, NCNE

 

[NOX]

The benefit of Hardware firewall is that hackers are most likely to be stopped before even entering your network. With software, hackers are able to get a little further in your network (passing your switches, hubs), and finding a specific computer to attack, hopefully finding a broken lock. Some software firewalls such as an OS (Solaris, NT, Unix) made for security and firewalling will act somewhat like a HWF by stopping hackers before they enter your network, and are just as effective as routers. A good thing about HWF is you don't have to worry about it going down once you set it up. Unless you lose power, but that would also mean your comp would lose power too, unless you are using back-ups.

I know a few running a Unix box and HWF, Cisco Pix, and Nokia FW-1. But I really don?t see a benefit to running ZoneAlarm and HWF at the same time. Personally, I feel HW and software firewalls offer higher or better MTBF. But HWF should offer higher MTFB because it's less complex to setup.