Zone Alarm Pro

[AlienCraft]

Anyone else using this as a firewall?
I just loaded it as I was having problems dumping the Randex.D bug recently. Today I received a warning from an IP addy in China with a score of 6800! they say over 1000 is a hostile "knock on the door",
Any uber security types got any other info to add? :Q :evil:

😛

 

[HappyPuppy]

I just use my wireless gateway as a firewall. I haven't had any problems.

 

[NutBucket]

I use Black Ice myself. While a good hardware firewall is good, if something does manage to get through a software firewall will flag outgoing traffic for you.

 

[Rottie]

I used default setting with Zone Alarm Pro 3 and Router with built-in firewall...no major problem...but will slow you down little if you are using dial-up.

 

[Shagga]

Is a firewall really necessary with a Dial-up connection. Just interested. 😉

 

[skyking]

folks do random port scans, so yeah, something is needed. If you were online an hour or so, and someone found an easy exploit, they could pretty much set up shop permanently in your computer.

 

[Cadaver]

I also use ZA 3 Pro (cable modem connection & my computer is always on), but I've also got a cable/DSL router (Linksys) with NAT turned on and no DMZ machine specified.
For incoming hack attempts, is NAT sufficient to stop attempts at reaching a specific machine? I presume it is, but want to be certain. I know Zone Alarm will prevent unauthorized outgoing data, but with NAT is it redundant for incoming data?

 

[skyking]

No, NAT is not going to stop much of anything, when it comes to sophisticated attempts. Are you running any programs that require port forwarding? Each one of those ports is a direct pipeline to your PC that is easily detectable via a port scan, for example.

 

[Cadaver]

Originally posted by: skyking
No, NAT is not going to stop much of anything, when it comes to sophisticated attempts. Are you running any programs that require port forwarding? Each one of those ports is a direct pipeline to your PC that is easily detectable via a port scan, for example.

No. I'm not running anything requiring port forwarding. Port scanners (like on www.grc.com, for what it's worth) list the scanned ports as "stealth."