Re: Neither, buy a router.

From: Leythos (void@nowhere.com)
Date: 01/02/03 

From: Leythos <void@nowhere.com>
Date: Thu, 02 Jan 2003 12:55:12 GMT

In article <xHNQ9.42010$VA5.8519246@news1.news.adelphia.net>,
davidwnh@adelphia.net says...
[snip]
> There is a good reason why some of the router manufacturers are bundling
> personal firewalls with their routers, and it is not just a marketing ploy.
> And there is a good reason why the same manufacturers are also now making
> routers with more extensive filtering and access control. And I thank
> Moore's Law for giving me a CPU in which I can run several services and game
> at the same time.

I agree with you, and it appears that we agree: Having at least the
hardware router/NAT with a software firewall IS a good idea. I don't
have a problem with software firewalls (I use CheckPoint FW-1 on one of
my networks, Firebox II on another, and just a router/NAT on another),
but I think that people that use ONLY a "personal" software firewall on
the same system that they work from are loosing a lot of horsepower.

Even linksys bundles personal firewall software with their router.
Having the router saves on how slow the typical home users computer will
get on a random basis.

So, I agree: Get a personal firewall, but also get a router to act as
the first line of defense.

I still think that the majority of home users will misconfigure their
personal firewall, or let something out because they don't know what it
is :)

BTW: My router logs get sent to a SQL server, then parsed to a web page,
and entry points/attempts are shown in select colors based on the port
number/range. I read my logs every day, just like at work.

Mark

> > This is in reference to PERSONAL FIREWALL APPS, not Checkpoint or
> > something like that:
> > 1) Software firewalls utilize CPU cycles on the machine they run on.
> > 2) Software firewalls are easy to misconfigure and are often
> > misconfigured.
> > 3) Software firewalls can cause problems with applications on the system
> > 4) Once you are under attack, a real one, not just a probe, your machine
> > utilizes almost 100% CPU cycles to fend it off.
> >
> > This is in reference to Modem Routers (Linksys, DLink, etc...)
> > A) Routers with NAT don't use ANY CPU cycles on the computers
> > B) Routers with NAT are easy to properly configure, then forget
> > C) Routers with NAT can cause problems with internet sharing apps (like
> > ICQ, Games) but in general they don't.
> > D) Routers with NAT protect more than one computer.
> >
> > You can, and should for a while, install the Router with NAT and a
> > personal firewall application - once you see that you don't really need
> > the personal firewall you can remove it.
> >
> > IN ALL EXAMPLES YOU SHOULD MAKE SURE THAT YOU HAVE STRONG ANTI-VIRUS
> > SOFTWARE INSTALLED.
> >
> > If you are going to run a software Proxy or NAT, just get a hardware one
> > for $75 bucks and be happy - no parts, no software, not hassle.
> >
> >
> >
> > --
> > --
> > Leythos999@columbus.rr.com
> > (Remove 999 to reply to me)
>
>
> 

-- 
--
Leythos999@columbus.rr.com
(Remove 999 to reply to me)

Relevant Pages

  • NAT vs. Personal Firewall
    ... I have a cable modem and a home network using filesharing. ... Or would a router that does stateful packet inspection ... as well as NAT be better? ... I'm aware that a personal firewall will help me identify trojans on my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: NAT vs. Personal Firewall
    ... > I have a cable modem and a home network using filesharing. ... Or would a router that does stateful packet ... > as well as NAT be better? ... > I'm aware that a personal firewall will help me identify trojans on my ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Internet connection sharing on a LAN
    ... >>Does each computer have just one network card each, or does one computer have 2 ... >>could run ICS, an internet sharing device built in to Windows XP. ... The router will block any malicious internet ... I agree with you about the personal firewall issue. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Find IP address from computer name
    ... I second the suggestion to use a personal firewall. ... See if the router guys can log port 139 into your network and then ... > might be able to match times of port 139 traffic to your audit logs. ... > personal firewall program like Kerio has pretty good logging ...
    (microsoft.public.win2000.security)
  • Re: Completely replace software firewall with hardware firewall?
    ... i.e. connected to a router connected to a cable modem. ... >> personal firewalls) the compromiser could disable your personal firewall ... >> different computers and versions of Windows, not one of them has been ...
    (comp.security.firewalls)
Loading