Re: Why do I need a software firewall?

From: Volker Birk (bumens_at_dingens.org)
Date: 09/30/05 

Date: 30 Sep 2005 08:59:25 +0200

Todd H. <comphelp@toddh.net> wrote:
> om.newsgroup@gmail.com writes:
> > It was my understanding that a router gave a hardware firewall which
> > was a million times better than a software one and gave you more
> > protection.
> From external, network-based attacks this is true.

No.

> A software firewall can add something your network level firewall
> cannot. It can interactively prompt you when new unknown programs on
> your PC try to make outbound connections.

This is counterproductive.

> This can be helpful in tipping you off to drive-by installs of
> software that shouldn't be on your machine, or alert you to software
> that is phoning home that shouldn't be.

Only seldomly this will be helpful.

> > In that case, why have a hardware firewall?
> Because if your software firewall goes down (which it can), then
> you're unprotected.

No. The OP asked comparing with his filtering router.

> Hardware devices are relatively non-complex and
> are easier to secure, unlike a multipurpose computer.

This is just nonsense.

Yours,
VB. 

-- 
MAC-Filtering bringt so viel Schutz vor "Hackern" wie Zeitungspapier vor
einer Atombome. (MAC filtering is protecting against "hackers" like newsprint
is protecting against a nuclear bomb)
                  - Christian Forler in de.comp.security.misc

Relevant Pages

  • Re: Why do I need a software firewall?
    ... > It was my understanding that a router gave a hardware firewall which ... Why should a ready made device, sold including a filtering software, ... MAC-Filtering bringt so viel Schutz vor "Hackern" wie Zeitungspapier vor ... (MAC filtering is protecting against "hackers" like newsprint ...
    (comp.security.misc)
  • Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls
    ... I have a 5 machine LAN here at home and I have Astaro Security Linux ... >>I agree with Microsoft's recommendation for a hardware firewall on all ... Then the user finds about port forwarding, and as soon as the user has ... > at the router and cannot get to the computers in the local network. ...
    (Full-Disclosure)
  • Re: [Full-Disclosure] Microsoft urging users to buy Harware Firewalls
    ... > I agree with Microsoft's recommendation for a hardware firewall on all ... Besides protecting against the MSBlaster worm, a hardware ... Then the user finds about port forwarding, and as soon as the user has ... at the router and cannot get to the computers in the local network. ...
    (Full-Disclosure)
  • Re: How to share the internet connection
    ... >> The connection is very simple, it's only an USB cable between the old ... router/switch provides a hardware firewall. ... way or form is this router a hardware firewall. ... computer on your network requested this incoming attack. ...
    (microsoft.public.windowsxp.general)
  • Re: XP Home safe file sharing (newbie)
    ... And being an idiot regarding routers/hubs and NAT I don't even know if the Dynamode ADSL Bridge Router is NAT or NOT! ... Each PC can access the Internet but I want to share files between each PC but without compromising security re the Internet. ... Each PC has a software firewall (ZoneAlarm) and the Hub/ADSL Modem has a hardware firewall. ...
    (microsoft.public.windowsxp.network_web)