Zone alarm? do i need it with my router?

[StraightPipe]

I have a linksys BEFSR41 4 prot router. I notice on the website they have several firmware updates available including one that says Zone alarm.

1.44.2z with Zone Alarm.
1.45.7.

I've never used zone alarm, but i figure its a good thing. I'm wondering if i should install the older one with ZA and then install 1.45.7 over top of it. or just the new or just the one with ZA. I'd rather only do it once to avoid probles involved with multiple installations, any advice? is zone alarm good? will i lose ZA if i install the newest?

Edit: oh yeah, i currently dont have any problems wth my router, should i install anything?

 

[sswingle]

I used a firmware with the zone alarm feature. Its really kinda stupid. It checks each client machine, and only allows them to access the internet if they have zone alarm installed.

I don't see the point, and used the vesion without most recently.

Oh, and you can't install one firmware on top of another. Each firmware update completely replaces the last.

 

[StraightPipe]

so, i should just leave well enough alone then...

has anyone tried the newst firmware, or had good/bad experiences with zone alarm.


see if I understand zone alarm correctly, I'd have to go install it on every pc and it wold do anything but block those without it?

is there any advantage to installing the newest firmware?

 

[StraightPipe]

I've been reading up on zone alarm around here,

it seems that the major consensus is that if you have a router you really dont need zone alarm.

that being said i dont think i'm going to waste any time installing it,... unless someone has a good argument to use it in addition to the router.

i got to thinking about it, and i'd have to install it on 5PC's and figure out how to make it work for a MAC box and my ps2.

 

[sswingle]

If I remember correctly, there was a setting to exclude certain IP addresses, so you could do that for your ps2. As for needing the update or not.......depends really. Linksys always lists the problems the firmware fixes, so read through that and decide if it fixes anything you need.

 

[anandfan]

that being said i dont think i'm going to waste any time installing it,... unless someone has a good argument to use it in addition to the router.

I'm pretty much in the same boat as you. Each member of the family has his/her own computer. I thought about installing ZoneAlarm or similar on my personal machine in case any of the other uses downloads and installs a virus laden program. Those things can sneak through with P2P programs, IM, etc. if the user is not careful. This really hit home when my son went to college this fall and he was told that if he didn't install the blaster-patch he would have it within 30 seconds of connecting to their net. So far, I haven't done it yet.

 

[JackMDS]

You might gain some insight by reading this.

Link: Basic Protection for Broadband Internet Installation.

 

[StraightPipe]

Thanks Jack, thats a great site.

I aced all the tests at gibson, so I dont think I'll be adding Zone alarm.

Now I've got

Norton2003
Adaware 6
Xp Firewall
Windows Update
Router

all working for me. and Gibson seems to think they are doing their job.

I have a few questions about the EZLAN article.

It mentions XP firewall and really discounts it. He recomends not using it. I'm curious if there is a ligitamate reason to turn it off or is this just ANTI-microsoft bullshit? /begins rant:I'm not saying they are the greatest comapnay, or that they arent trying o make tons of money (because all bussinesses are). but they have made alot of good software. Anyone who uses a computer has delt with microsoft products, and must have enjoyed t a bit or we wouldnt be enthusiests.

yeah. so XP firewall, is it good?

He also mentions netbuei. I know I've got that installed on my old 98 box (but i dont think it's used anymore) is it worth the effort to try and convert the other 4 PC's and 1 MAC?

Do you think getting a perfect stealth rating at Gbsons is good enough? are there other tests i should try?

 

[lucky9]

The only problem with XP's firewall that I'm aware of is that it's one sided, it only stops stuff from outside getting in. If you download with P2P or IM you can have something that will try to get out, for whatever reason like denial of service attacks and keyloggers. this is what ZA is supposed to do for you. It lets you know if something you don't want to do so, have access to the net. Also, you can use the lock feature (if needed) for whatever reason.

 

[InlineFive]

Everyone knows the Windows XP Firewall stinks, just make sure your Port 113 is "cloaked/stealthed" and most routers do everything else and your fine. My Netgear MR814 firewall is just as effective as Norton Internet Security 2002 if not better. Norton did some adaptive thing where it started blocking port detects after a while but the router blocked them immediantly.

-Por

 

[mboy]

Originally posted by: StraightPipe
Thanks Jack, thats a great site.

I aced all the tests at gibson, so I dont think I'll be adding Zone alarm.

Now I've got

Norton2003
Adaware 6
Xp Firewall
Windows Update
Router

all working for me. and Gibson seems to think they are doing their job.

I have a few questions about the EZLAN article.

It mentions XP firewall and really discounts it. He recomends not using it. I'm curious if there is a ligitamate reason to turn it off or is this just ANTI-microsoft bullshit? /begins rant:I'm not saying they are the greatest comapnay, or that they arent trying o make tons of money (because all bussinesses are). but they have made alot of good software. Anyone who uses a computer has delt with microsoft products, and must have enjoyed t a bit or we wouldnt be enthusiests.

yeah. so XP firewall, is it good?

He also mentions netbuei. I know I've got that installed on my old 98 box (but i dont think it's used anymore) is it worth the effort to try and convert the other 4 PC's and 1 MAC?

Do you think getting a perfect stealth rating at Gbsons is good enough? are there other tests i should try?

Not that I am a fan of software firewalls running ON TOP of windows, but it is pretty good for the masses (I dont use one) who only have a NAT router (which has firewall properties, but isnt really a firewall). Don't be fooled by Gibson's tests, they are VERY basic and certainly do not scan for all ports.

 

[InlineFive]

Originally posted by: mboy

Originally posted by: StraightPipe
Thanks Jack, thats a great site.

I aced all the tests at gibson, so I dont think I'll be adding Zone alarm.

Now I've got

Norton2003
Adaware 6
Xp Firewall
Windows Update
Router

all working for me. and Gibson seems to think they are doing their job.

I have a few questions about the EZLAN article.

It mentions XP firewall and really discounts it. He recomends not using it. I'm curious if there is a ligitamate reason to turn it off or is this just ANTI-microsoft bullshit? /begins rant:I'm not saying they are the greatest comapnay, or that they arent trying o make tons of money (because all bussinesses are). but they have made alot of good software. Anyone who uses a computer has delt with microsoft products, and must have enjoyed t a bit or we wouldnt be enthusiests.

yeah. so XP firewall, is it good?

He also mentions netbuei. I know I've got that installed on my old 98 box (but i dont think it's used anymore) is it worth the effort to try and convert the other 4 PC's and 1 MAC?

Do you think getting a perfect stealth rating at Gbsons is good enough? are there other tests i should try?

Not that I am a fan of software firewalls running ON TOP of windows, but it is pretty good for the masses (I dont use one) who only have a NAT router (which has firewall properties, but isnt really a firewall). Don't be fooled by Gibson's tests, they are VERY basic and certainly do not scan for all ports.

First for mBoy: What is your qualification of a firewall router then? All routers have NAT but some have more, my Netgear MR814 has SPI, DOS Protection, and a lot more I havent bothered with.

For everyone: Try this port scanner, a couple of people here on the forums recommend it. Typically this test will show if you need a firewall or not, if Port 113 is open but everything else is stealthed look farther down the page for information on stealthing this port.

-Por

 

[mboy]

Originally posted by: PorBleemo

Originally posted by: mboy

Originally posted by: StraightPipe
Thanks Jack, thats a great site.

I aced all the tests at gibson, so I dont think I'll be adding Zone alarm.

Now I've got

Norton2003
Adaware 6
Xp Firewall
Windows Update
Router

all working for me. and Gibson seems to think they are doing their job.

I have a few questions about the EZLAN article.

It mentions XP firewall and really discounts it. He recomends not using it. I'm curious if there is a ligitamate reason to turn it off or is this just ANTI-microsoft bullshit? /begins rant:I'm not saying they are the greatest comapnay, or that they arent trying o make tons of money (because all bussinesses are). but they have made alot of good software. Anyone who uses a computer has delt with microsoft products, and must have enjoyed t a bit or we wouldnt be enthusiests.

yeah. so XP firewall, is it good?

He also mentions netbuei. I know I've got that installed on my old 98 box (but i dont think it's used anymore) is it worth the effort to try and convert the other 4 PC's and 1 MAC?

Do you think getting a perfect stealth rating at Gbsons is good enough? are there other tests i should try?

Not that I am a fan of software firewalls running ON TOP of windows, but it is pretty good for the masses (I dont use one) who only have a NAT router (which has firewall properties, but isnt really a firewall). Don't be fooled by Gibson's tests, they are VERY basic and certainly do not scan for all ports.

First for mBoy: What is your qualification of a firewall router then? All routers have NAT but some have more, my Netgear MR814 has SPI, DOS Protection, and a lot more I havent bothered with.

For everyone: Try this port scanner, a couple of people here on the forums recommend it. Typically this test will show if you need a firewall or not, if Port 113 is open but everything else is stealthed look farther down the page for information on stealthing this port.

-Por

If yours has SPI, DOS prevention, can create in/out ACL's based on Source/Dest IP & port, then you don't have a NAT router. That's a firewall. A NAT box that only allows you to forward a port to a LAN IP is not a firewall. It is a NAT router.

 

[JackMDS]

Vehicles.

There is a vehicle to take the kids to school.

There is a Vehicle for Racing.

There is a Vehicle for construction etc.

Firewall.

There is a Firewall setting good enough for Dialup.

There is Firewall good enough for Home Broadband.

There is a Firewall for Cooperate WAN.

There is Firewall for Bank etc.

NAT Firewall in Not a Real Firewall it is BAD" or similar statements do not serve any constructive purposes.

Generalities aimed to ?I am always right? do not really serve any constructive purpose.

I have nothing against or for Gibson, but if all Broadband Home User will be safe on the level that analyzed by his tools, the majority of consumer related Internet security troubles will be eliminated world wide.

 

[groovin]

even with a router, i use a personal fw. it wont help filter any inbound because the router is already doing that, but its helped out with the outbound. ive gotten trojans before that attempted making connections but zone alerted me of it. now i just have one big fw in front of everything.

 

[mboy]

Yes Jack, I remember your buddy's bulldozer!!!

 

[mbackof]

I have a DLink NAT and I use personal firewall software on my computers. I like the fact that the personal firewall software will tell me if a process is trying to get to the internet. There is always silly software trying to get out and chew up my bandwidth.

Mike

 

[InlineFive]

Originally posted by: mboy

Originally posted by: PorBleemo

Originally posted by: mboy

Originally posted by: StraightPipe
Thanks Jack, thats a great site.

I aced all the tests at gibson, so I dont think I'll be adding Zone alarm.

Now I've got

Norton2003
Adaware 6
Xp Firewall
Windows Update
Router

all working for me. and Gibson seems to think they are doing their job.

I have a few questions about the EZLAN article.

It mentions XP firewall and really discounts it. He recomends not using it. I'm curious if there is a ligitamate reason to turn it off or is this just ANTI-microsoft bullshit? /begins rant:I'm not saying they are the greatest comapnay, or that they arent trying o make tons of money (because all bussinesses are). but they have made alot of good software. Anyone who uses a computer has delt with microsoft products, and must have enjoyed t a bit or we wouldnt be enthusiests.

yeah. so XP firewall, is it good?

He also mentions netbuei. I know I've got that installed on my old 98 box (but i dont think it's used anymore) is it worth the effort to try and convert the other 4 PC's and 1 MAC?

Do you think getting a perfect stealth rating at Gbsons is good enough? are there other tests i should try?

Not that I am a fan of software firewalls running ON TOP of windows, but it is pretty good for the masses (I dont use one) who only have a NAT router (which has firewall properties, but isnt really a firewall). Don't be fooled by Gibson's tests, they are VERY basic and certainly do not scan for all ports.

First for mBoy: What is your qualification of a firewall router then? All routers have NAT but some have more, my Netgear MR814 has SPI, DOS Protection, and a lot more I havent bothered with.

For everyone: Try this port scanner, a couple of people here on the forums recommend it. Typically this test will show if you need a firewall or not, if Port 113 is open but everything else is stealthed look farther down the page for information on stealthing this port.

-Por

If yours has SPI, DOS prevention, can create in/out ACL's based on Source/Dest IP & port, then you don't have a NAT router. That's a firewall. A NAT box that only allows you to forward a port to a LAN IP is not a firewall. It is a NAT router.

Mine has that stuff, awesome thanks. So I could do away with Norton altogether, except the AntiVirus of course.

-Por

 

[JackMDS]

Quote: So I could do away with Norton altogether, except the AntiVirus of course.

Yeah it is a solution when you have very few Applications on your computer, and you do not care how your screen look like when you surf.

But to set it up (as mentioned above) with many applications, and secure the calling home capacity? Nah!

A good software Firewall gives you on the spot popup alert with a room to decide at the spot or to create an ad_hoc rule.

In addition the newly Software Firewalls can intercept Viruses eliminate Ads/Popups block the referrers, and do other thing that are not embedded in Routers System.

Firewall set for Business, and or Hosting is not necessarily the best solution for General Home usage.