Setting up router/firewall

[gizbug]

Have a Linksys router.
My question is this. Do you block all ports at all times on your router? Sometimes I leave ports open all the time (ie torrents, ftp, mirc ident ports). Is this bad practice?
Will a hardware router/firewall block ALL ports unless your opt to open some of the ports.

 

[JackMDS]

Originally posted by: gizbugWill a hardware router/firewall block ALL ports unless your opt to open some of the ports.

Yes, the Router Keeps all port inaccessible from the WAN Side.

Link to: Cable/DSL Routers - NAT & Ports.

:sun:

 

[gizbug]

According to that, it is good/essential to run a SOFTWARE firewall with your hardware firewall to prevent information from going out?

Is this true?

 

[JackMDS]

Yes.

 

[dc5]

yes, because if they somehow get past the hardware firewall you still have another layer of security. i have certain ports opened at all times only because i host my own site.

 

[VirtualLarry]

Originally posted by: gizbug
According to that, it is good/essential to run a SOFTWARE firewall with your hardware firewall to prevent information from going out?

Is this true?

Yes. I have certain ports forwarded through the NAT layer in my DSL modem to my PC, but I also run a software firewall. So for example, IDENT, TCP 113 incoming, is forwarded from the DSL modem to my PC, but if I'm not running mIRC, the software firewall has a default "drop all" rule for unsolicited incoming TCP/UDP, so to an outsider, it appears that nothing is there.

I can still see the failed IDENT requests coming in from the outside internet on my software firewall's logs too.