Should I keep the firewall?

[AgaBoogaBoo]

I'm going to format and need to decide if I really need to install the firewall again or not. I'm behind a router, which blocks out most things, and I haven't really gotten any attacks that I can remember. I don't have any ports routed to this computer either. I use it for website development, gaming, IM and e-mail, along with a few other small things.

I just feel it's not worth it, opinions?

Reason I'm posting it in OT is because I want to get this all setup tonight, not tomorrow when I get a response in another forum

 

[Shawn]

FIREWALL + FIREWALL = FIREWALL


therefore, no.

 

[Match]

A router can block incoming attacks, but it won't block possibly harmful connections from your computer. If you somehow get spyware on your computer, it can send info to the net without your permission. A router can't do a thing about it. This is where a software firewall comes in handy.

 

[jagec]

always run a firewall...the router might block *some* stuff, but it'll never tell you if WMP wants to MS phone home or anything.

 

[Goosemaster]

THink of it in this manner...


There are 7 layers in the OSI model.

YOur average router takes care of 3 of the 7. If they include an SPI firewall, depending on the quality of the package, it might cover layer 7. that still leaves 3 layers.

Obviosuly that BS i just spit out is meant to frighten you, and rightly so.

THe most grevious error you can make is to assume that hardware can simply take the palce software. Those software firewalls serve a valid purpose, protecting you from attacks that your router will not even be aware of.

 

[AgaBoogaBoo]

Fine, I'll be keeping it, thanks guys! Nice writeup Goosemaster! :beer:

 

[Mo0o]

i would do it, it can't hurt

 

[Goosemaster]

Originally posted by: AgaBooga
Fine, I'll be keeping it, thanks guys! Nice writeup Goosemaster! :beer:

good luck. Remember that routers are still good two. THey will do a decent job of layers 1-3 such as allowing for simple acces lists(layer 3) or some even offer layer 7 like I said, in which they offer porotection against cookies, activex conttrols etc.

THe importance of software firewalls again is in layers 5 and seven(6 is a presentation layer which for this discussion isn;t as importatn)

Layer 6 is sessions and usch. YOu want to make sure that a firewall program monitors telent access any means of login to your pc that people might resort to. Layer seven is pretty damn powerful too, so a compromise of an app could possibly undermine any protection(including your router) when it comes to al l the other layers. Remember, your router cannot check layer7 packets WELL suc has commerical equipment can, so if your pc is compromised, they will have "free rign."


enjoy

 

[So]

Well, what is a decent firewall? I used to use Zone Alarm, but it FUBARED file/printer sharing on my network, so I use a hardware firewall + NAV at the moment. Any free, decent firewalls that won't screw up the network?

 

[Goosemaster]

Originally posted by: So
Well, what is a decent firewall? I used to use Zone Alarm, but it FUBARED file/printer sharing on my network, so I use a hardware firewall + NAV at the moment. Any free, decent firewalls that won't screw up the network?

They' are ALL ok, as long as you read the MANUAL. YOu must make sure to let stuff(usuch as printer sharing) through. Most block everything by default, or at least ask for confirmation before it lets stuff through.

 

[Fingolfin269]

Try Kerio. I used to use ZA until one of these threads popped up about a week ago and I got talked into trying out Kerio. I like it so much more than ZA. It's a lot more user friendly and actually seems to notice things at more of a micro level than even ZA did.

 

Originally posted by: Fingolfin269
Try Kerio. I used to use ZA until one of these threads popped up about a week ago and I got talked into trying out Kerio. I like it so much more than ZA. It's a lot more user friendly and actually seems to notice things at more of a micro level than even ZA did.

ZA seemed to screw with some of my settings on my comp as well. Kerio left well enough alone. Another + for Kerio.

 

[Goosemaster]

Originally posted by: FallenHero

Originally posted by: Fingolfin269
Try Kerio. I used to use ZA until one of these threads popped up about a week ago and I got talked into trying out Kerio. I like it so much more than ZA. It's a lot more user friendly and actually seems to notice things at more of a micro level than even ZA did.

ZA seemed to screw with some of my settings on my comp as well. Kerio left well enough alone. Another + for Kerio.

THat and K firewall(for linux) are the best in terms of freebies, and they best quite a few pay options as well.

 

[jagec]

I use Kerio 2.1...for some reason the latest version didn't seem as customizeable. Probably all in my head.