Re: routers and firewalls

From: Christo (chris_at_juststuff.co.uk)
Date: 10/28/04 

Date: Thu, 28 Oct 2004 18:13:14 +0100

"Martin" <martin_nospam@btinternet.com> wrote in message
news:clqngh$qdo$1@hercules.btinternet.com...
> Christo wrote:
>
>> i know using routers to access the net with NAT is like having a firewall
>> (hardware firewall)
>>
>> I am totally unfamiliar with it but if i did have a router lets say the
>> latest linksys adsl router, would i need to have a software firewall on
>> the terminal it was connected to? or would the NAT on the router do the
>> job
>>
>
> You might like to read the white paper on Watchguard's web site.
>
> Why a Real Firewall Provides the Best Network Protection
>
> Many small businesses mistakenly believe that low-end NAT devices with or
> without stateful packet inspection (SPI) functionality provide the same
> network protection as a true firewall. But these devices were not built
> for security and leave networks open to attack. This paper explains how
> NAT devices work, how firewalls are different, and why an integrated
> firewall/VPN solution provides the best network protection for small
> businesses, remote offices, and telecommuters.
>
> http://www.watchguard.com/infocenter/whitepapers.asp
>
> A router with NAT is not like having a firewall

so with router that includes NAT i would still be wise to also run ZoneAlarm
Pro

this is soley for a home network of 3 PC's and a laptop

i dont really want to go wireless, as its all wired in now with trunks etc
and it would be a job taking it out, cosmetically it would involve re
decorating a few rooms... no way

Relevant Pages

  • Re: New modem and iptables...
    ... The router performs firewall and NAT functions ... If you want to persuade me it's a modem, ... it's a router and _it_ has your public Internet address. ... It also does NAT (otherwise you couldn't have a private IP address on ...
    (Fedora)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (comp.security.firewalls)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (alt.computer.security)
  • Re: IP Addressing
    ... Address of the ISA server? ... firewall and router). ... On the firewall create a static NAT entry as I wrote ...
    (comp.dcom.sys.cisco)
  • Re: Would a firewall prevent Sasser worm?
    ... >> the same level of protection that I would have with any NAT router? ... >There are a variety of known attacks which can crash routers, ... >Firewall capability allows you to modify the NAT behaviour to allow selected ...
    (comp.security.misc)