why is using a router with my home broadband connection good?

[metallibloke]

So i was talking with a colleague at work about broadband and stuff. This bloke is a networking guy but is cr@p at explaining stuff. Anyway, we got on to the subject of connecting several machines to the internet through a router. He said it would make the connection more secure, is this right? if so, what makes it more secure? would I still need a software firewall (currently run zonealarm). The router he recommended was a Linksys BEFSR41, 4-port whatnot. Link

As i dont know much about networking, except the basics, i thought i would pick the AT forums brains. Please posts any other info you think may be relevant, as i crave knowledge!

Thanks in advance.

(p.s. my ISP is NTL in the UK, if that makes any difference)

 

[lucky9]

The router has an IP address that is all someone/cracker on the internet can see. Most of the time, unless the government is after you, this will secure you from those on the internet that would be a bother. The software is to prevent something that you, on purpose, brought onto your PC. Both provide pretty tight security when used together. The '41 is a pretty fair one for consumer use. Linksys have an easy setup etc, be sure if you go this way that you use a strong password for the router. If physical security is not a problem you can paste it on the router itself. If the government wants you...don't put it on a computer.

PS: NAT (network address translation) and SPI (statefull packet inspection) are where you want to be with these things. It's where I'm at.

 

[gunrunnerjohn]

The reason for the added security of a router is the NAT layer. Unless you specifically configure ports to be forwarded to a machine on your LAN, all incoming requests are blocked. This is, in effect, an incoming firewall. There is no control of outgoing traffic, so the firewall protection of a broadband router isn't as complete as a good software firewall.

 

[JackMDS]

Link to: AnandTech - FAQ. Basic Options for Internet Connection Sharing

Link to: AnandTech - FAQ. Hubs, routers, switches, DSL, LANs, WANs...?

Link to: Basic Protection for Broadband Internet Installation.