Re: Firewall Recommendations?

From: Leythos (void@nowhere.com)
Date: 10/09/02 

From: Leythos <void@nowhere.com>
Date: Wed, 09 Oct 2002 00:18:08 GMT

In article <hjGo9.507156$f05.21735300@news1.calgary.shaw.ca>,
someone@somewhere.com says...
>
> "Leythos" <void@nowhere.com> wrote in message
> news:MPG.180c813d2eb26d56989890@news-server.columbus.rr.com...
> > In article <udso9.3403$0o4.2240@sccrnsc03>, mbialczak@attbi.com says...
> > > I currently have installed a copy of Sygate Personal Firewall. A friend
> > > recommended Zone Alarm Pro. Is this a good firewall. Does anyone
> recommend
> > > anthing else?
> >
> > As a security manager, I suggest that you get a Linksys Router, provided
> > you have DSL or CABLE. The Linksys will stop 99% of your daily inbound
> > problems, 100% if you don't forward any public ports to the internal
> > network.
>
> A security manager and you recommend Linksys + claim 99% security with stock
> NAT router & 100% security if you disable port forwarding... Damn man! Where
> do you work??? Secuyity manager huh, damn, that's scary!
>
> Nothing at all is 100% secure, let's just leave it at that!

Dude this was a home system and not a business. Notice I said it will
STOP 100% of the inbound if you don't forward, and that's true. I didn't
say anything about it blocking inbound traffic that an internal
application asks for!

In all the years I've been doing this, a NAT Router will keep most home
users more than 99% safe and it's not something they can screw up like
ZA or Tiny by clicking on allow rule and then not understanding what
they just did.

None of the sites I manage have been hacked or even infiltrated by a
virus, and I run IIS on all of them (60+ exposed IP's). I should also
point out that they are protected by a firewall appliance and NAV, not
just a router. I also have a block list in the router that take care of
most of Asia and non-usa companies.

You need to understand that the average home user, 99% of them, don't
understand anything about ZA or Tiny or BID, they just accept the alert
and then expose their systems without knowing they did it.

  

-- 
--
Leythos999@columbus.rr.com
(Remove 999 to reply to me)

Relevant Pages

  • Re: Help a no nat configuration with firewalls?
    ... Install a real firewall appliance, not a generic router, that permits ... Do not allow ALL outbound, ... Do not allow ALL inbound, only inbound for what is specifically ...
    (comp.security.firewalls)
  • Re: Very Slow Web Browsing
    ... > After I restored the laptop last night, I had'nt put a software firewall on ... See what others are running and recommend> ... Zone Alarm is not the end-all of firewall software. ... > router, then a network cable from the router to the laptop? ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: Advice needed...
    ... The router devices only block inbound and do not block outbound at all. ... A firewall will block ALL inbound and outbound by default and forces you ... A firewall often has services that can filter attachments out of email, ...
    (comp.security.firewalls)
  • Re: Exchange blockes inbound traffic
    ... Inbound traffic is the problem. ... The server is usually behind a firewall ... into the router it still cant go to the net. ...
    (microsoft.public.exchange2000.connectivity)
  • Re: Routers
    ... > Can anyone recommend good, easy to use software to use as a home network ... > router and Firewall on a old P1 machine? ...
    (microsoft.public.windowsxp.general)