Firewalls

[Jeff Rodriguez]

what firewalls are the best. I just got a cable modem and would like to know what people use and whats the best.

[sanddrag]

I don't know anything about configuring routers but don't have your computer(s) set up for printer sharing because I've heard that it enables anyone to access your entire computer.

[Ricky Q.]

Zone Alarm is alright....or BlackIce

[Trashed20]

there is also tiny personal fire wall.
like falco said, blackice. Black Ice is probably the best bet and the most user friendly. Its $50 or so at comp stores or you could dowload it illegally for free even though thats bad So Don't Pirite Stuff ........very much.

[Mike Soukup]

Skip the software firewall and get a router. A hardware firewall is the only way to be certain (well, as certain as one can reasonably be) that your computer is safe from intruders. Once you have a real firewall (either a router or a dedicated computer) you can open up the computers that are behind it and share files, printers, etc. Routers with a 4 port switch are about $70 now. I have a linksys and haven't had any problems with it, but there may be better ones out there.

Search the forums, I think we've answered this question before.

Mike

[Nate Smith]

I'm not sure if you need the wireless aspect of it or not, but I'm using a D-Link DI-713P at home....broadband router with built-in firewall, wireless access point, and print server...

[evulish]

One word: iptables

So that's not really a word...more of a program name Go buy an old 486 or something and set it up as a firewall running linux and iptables. It would be cheaper than buying a commercial firewall, probably.

[Ian W.]

i was going to do a cheap solution like that, but it turned into a file server (for my home network [and yes, i'm a big nerd]). also, many people don't know linux, and dont' want to learn linux. it's much easier to spend the 70 bucks and get a firewall. with the 4 port switch, it makes it much better too.

[DanL]

Ogre, people have said a lot, but I'm not sure on how much you know what they're talking about, so let me clarify things for you.

First of all, there are two types of firewalls - software firewalls, and hardware firewalls. Hardware firewalls are usually found in routers.

If you have only one computer in your house and don't plan on getting a second anytime soon, go for a software firewall. You can find reviews of the big players - BlackIce, ZoneAlarm, etc - almost anywhere. Start at cnet.com, pcmagazine.com, maybe even techtv.com might have something.

However, if you have more than one computer, or plan on getting a second computer in the future, go for a router (for those of you that don't know, a router is a little magical box that you plug your cable modem and a few computers into, and then through the powers of jeebus, they're all networked together and your broadband connection is shared). I'm pretty sure all consumer-oriented routers have firewalls built in, but you should check. As for what router, as long as you don't plan on doing anything advanced (i.e. run your own server), the Linksys ones are nice and user-friendly (however, once you do try and run your own server, you're gonna want to shoot the ol' Linky ).

As for file-sharing and print-sharing, as long as you have some firewall, you can be reasonably sure you're safe with these options on. Keep in mind that just because you have a firewall, it doesn't mean you're completely safe - there most likely are tricks to get around one, but that's only if you're very determined to get around it, and quite honestly, i'd say most hackers just try and find another unprotected victim. The point is file-sharing and print-sharing are a convinience when you have a home network, and if you have a firewall (either hardware for the whole network, or software on every computer hooked up), you shouldn't worry about turning these on.

If you're still paranoid about file and print sharing, do this: just share the directories or partitions that don't have something uber-important. Like me, I don't share my C (windows) drive, but I do share my mp3's partition, my media partition, my Documents partition (all my "important" documents I keep on the C drive, which isn't shared). Doing this you still have the convienience of having shared files on your network, but your paranoia can be put at rest since even if someone does get by your firewall, they'll have a hard time getting to your important files.

[Jeff Rodriguez]

thanks guys for the advice, especially superdan, although i knew most that before i posted this or as i did from talking to people. I only have one computer so a router won't be nessesary. I got ZoneAlarm. My next question - What the hellis with all the messages saying that it blocked so-n-so? Does that mean that many people are trying to hack me, or is that just cookies and stuff its telling me about?

[Ashley Weed]

Before I had to rebuild my computer due to either a hacker or a virus that 'slipped' through, I ran Zone Alarm. I absolutely hated it, it was always popping up and asking you the same annoying questions. Now that I have my computer back up and running, I am trying to decide on what firewall to use. I found this article to be very helpful, and have found other articles there to be correct and useful in the past. I hope the link below works:
http://www.pcworld.com/features/arti...30,pg,4,00.asp

[Ian W.]

dan forgot to mention one tiny thing about software firewalls... they're not for the people who don't know every single detail about their computer. for the casual user, i still say you're better off with a hardware firewall, for two reasons.

1) it's safer, because if the software firewall crashes and becomes disabled, there's a possibility you are now unprotected, and bam, you're hacked and crying. never a good thing.

2) easy of installation and operation. software firewalls are hard to configure, unless you know what should and shouldn't be transmitting on your computer. they are much harder to set up (instead of plugging two wires into a box, you have to install a program, which may be hard for people).

now, on the flip side, if you're a computer nerd, a combo of hardware and software is unbeatable. you are protected from the internet by the hardware firewall, and protect from yourself by the software firewall. how, you may ask? well, a software firewall can (well, most can at least) detect every single input and output over your NIC (Network Interface Card). so, in the hands of someone who understands and knows what they're doing, a software firewall can detect trojans and other nasty things before your anti-virus software does, or even if the anti-virus software doesn't detect the virus.

so, what this boils down to is for the average user, a hardware firewall/router is a much better deal (IMO), and fora nerd, a combo of hardware and software are the best.

also, dan, if you have more than one computer, i believe you need a router, because otherwise, each computer is directly on the WAN (Wide Area Network), and the cable companies don't like that. so, a router mimicks one computer, but really just shares the connection and blocks unwarrented transmissions.

hope this helps, and didn't just confuse you more... feel free to ask if you're completely confused, took me a while to figure out all this stuff too.

*edit:

forgot to mention one thing. those crazy messages are transmissions to and from your PC. some may just be IE or your email client, some may be computer games, some may be windows (yes, windows always wants to get online :/), or any other program on your pc. if you don't know what it is, i block it, but in your case, i think you're much better off buying a hardware firewall, because you're not sure how to use the software firewall. if you do have any problems with the messages, try to post some pics online so we can help you.

[Wetzel]

I have a Netgear 8 port RO318 Cable/DSL Security Router and a4 port FR314 Cable/DSL Firewall Router . We have these because my dad likes to keep everything out. He has it cranked way down, so that I can't listen to Winamp streams or access most ftps or use irc. D: Really sux. But he needs his security.

I also have Norton Internet Security as a software firewall.
Had Zone alarm and liked it, but Norton is better and came with something for free, I THINK the FR314.... (Firewall/antivirus bundle)

Anyway, basic computer connected to the internet reminders.
Have an antivirus program.
If you have broadband, at least some form of software firewall. Or if you have dialup and are on for long periods of time.

A hardware firewall if you have sensitive information, such as tax records.


Wetzel
~~~~~~~~~~~~~~~~~~~~~~~~
/me is listening to E:\Dune\Dune - Hard Core Vibes.mp3

[Ian W.]

jeff, you know that you can let certain ports through to your computer with firewalls, right? that still protects your dad's stuff, but lets you have your fun. on most firewalls, it's super easy to do, as logn as you're inside the network and have the password.

[Wetzel]

Originally posted by Ian W.
jeff, you know that you can let certain ports through to your computer with firewalls, right? that still protects your dad's stuff, but lets you have your fun. on most firewalls, it's super easy to do, as logn as you're inside the network and have the password.

Yes, I know. As does my dad. He however has the idea that IRC has security holes. And all UDP traffic is unneccissay and insecure.
And even if he only lets my ip have IRC or other ports, then that compromises the entire network. He is overly paraniod.
IE has far more holes then IRC, yet it is ok because he needs to use it.



Oh well.

Wetzel
~~~~~~~~~~~~~~~~~~~~~~~
/me is listening to E:\Five Iron Frenzy\Five Iron Frenzy - These Are Not My Pants.mp3