PDA

View Full Version : firewalls

*spazzed*
12-17-01, 05:38 AM
what are some good firewalls? Someone keeps dropping a backdoor on to my computer and its not funny :mad:
thanks in advance :burn:
KILLorBE
12-17-01, 05:48 AM
Zone Alarm and Black Ice, If you're running WinME you could also install ICS, works fine for me.
dugans
12-17-01, 06:18 AM
As above: ZoneAlarm and Black Ice are the 2 most common- there are others. I tried both and think that ZoneAlarm is better, personally.

If you have a broadband connection I would suggest either a gateway router or 1 rig as a proxy server/router : I have done it both ways, and use a gateway router now since I hate to use up the resources on a pc. (Gotta keep 'em crunchin')
rugby
12-17-01, 07:44 AM
The home-routers everyone's labeling as firewalls are NOT firewalls. Real firewalls are much more sophisticated pieces of equipment with many more customization options. Checkpoint, Sonicwall, Cisco are makers of REAL firewalls.

Now, having said that a router performing NAT would be okay for most stuff, but if somebody wants to get in, they'll get in.
Smizack
12-17-01, 08:32 AM
Originally posted by rugby
The home-routers everyone's labeling as firewalls are NOT firewalls. Real firewalls are much more sophisticated pieces of equipment with many more customization options. Checkpoint, Sonicwall, Cisco are makers of REAL firewalls.

Now, having said that a router performing NAT would be okay for most stuff, but if somebody wants to get in, they'll get in.

Also FYI, Blackice is a worthless "firewall"...
dugans
12-17-01, 08:34 AM
Originally posted by rugby
The home-routers everyone's labeling as firewalls are NOT firewalls. Real firewalls are much more sophisticated pieces of equipment with many more customization options. Checkpoint, Sonicwall, Cisco are makers of REAL firewalls.

Now, having said that a router performing NAT would be okay for most stuff, but if somebody wants to get in, they'll get in.

A very good point: gateway routers only provide very simple firewall protection. I do like the fact that they provide a small (albeit VERY small;) ) amount though. And they don't eat up my cpu cycles as much as a proxy server does! Add to it personal firewall software, much of which is available as freeware and has a small cpu "footprint" and you have a reasonable amount of protection, IMO, for a home user.

NOTE: a truly determined hacker will get in- my goal is to keep script-kiddies and self-propagating virii out
KILLorBE
12-17-01, 08:37 AM
Originally posted by rugby
The home-routers everyone's labeling as firewalls are NOT firewalls. Real firewalls are much more sophisticated pieces of equipment with many more customization options. Checkpoint, Sonicwall, Cisco are makers of REAL firewalls.

Now, having said that a router performing NAT would be okay for most stuff, but if somebody wants to get in, they'll get in.

What does NAT mean?
But to me there's no such thing as a 'REAL' firewall (IMHO).....Don't challenge me :p ......I got XXXXXXXX's IP (a senior member), when I have some time I'll crack his box.(He seemed to be confident that his box couldn't be cracked.......we'll see :D ).

NO I'm not a cracker, I just happen to know certain stuff;)
dugans
12-17-01, 08:41 AM
NAT= Natural Address Translation

very simple firewall allowing packets through either way according to a set of rules: ports, incoming/outgoing and ip address.
WillysNut
12-17-01, 08:50 AM
I highly advise people to stay away from Black Ice Defender. Both registered, official copies, and slimy stolen copies have been found to allow many forms of attack right through the firewall.

Black ice is great a telling you your getting attacked but if you're not standing in front of your PC, chances are, someone can sneak in a trojan or other nasty and use your PC for DDoS attacks.

Norton and Zone Alarm are among the more touted software firewall packages but as mentioned above, a hardware based firewall/router utilizing NAT is probably the best way to go if you have the $$$.

I've been using Zalarm since I started using a cable modem and have not had a problem yet.

Check out this awesome article (http://grc.com/dos/grcdos.htm) at GRC.com about dedicated denial of service attacks. At the bottom of the rather long but interesting article, the author reviews both BID and ZA. Enjoy!
TranceBear
12-17-01, 11:37 AM
My SMC Barricade/broadband router/firewall is great and they sell for like $60-70. I had a Gibson computer try to get in and they failed. But if someone wanted to try REAL hard to get my MP3 and porn, I am sure they could. It's pretty hard when all your ports are closed!
rugby
12-17-01, 01:10 PM
Originally posted by rogerdugans
NAT= Natural Address Translation



Network Address Translation:D
dugans
12-17-01, 01:53 PM
brain cramp:rolleyes:
touser
12-17-01, 08:59 PM
2 good free software firewalls are zonealarm and tiny personal firewall, personally i think tiny is better but thats just me..it is MUCH more configurable.
WillysNut
12-17-01, 09:14 PM
Originally posted by touser
2 good free software firewalls are zonealarm and tiny personal firewall, personally i think tiny is better but thats just me..it is MUCH more configurable.

Hey touser, do you know if it supports Windows ICS (internet connection sharing)? Gonna read up but I thought I'd ask.
Yodums
12-17-01, 10:36 PM
Originally posted by WillysNut


Hey touser, do you know if it supports Windows ICS (internet connection sharing)? Gonna read up but I thought I'd ask.

I don't use that ICS but I use AnalogX which is another proxy and yes I used both ZoneAlarm and Tiny on it.
S_Wilson
12-17-01, 11:47 PM
I use a Linksys Gateway/Router(nat) with Zone alarm on each computer. I think that is the best I can do for the price. Also my cable provider does not use Static IP, they use DHCP.
crazyman
12-18-01, 10:21 PM
Originally posted by rugby
The home-routers everyone's labeling as firewalls are NOT firewalls. Real firewalls are much more sophisticated pieces of equipment with many more customization options. Checkpoint, Sonicwall, Cisco are makers of REAL firewalls.

Now, having said that a router performing NAT would be okay for most stuff, but if somebody wants to get in, they'll get in.

whoa! I have a hardware firewall(router) and I have ran every security test that I can find over the last couple years ,and NOTHING has ever gotten through it,and like was said before in this thread,I have more resources available and excellent protection.

I like my linksys router/switch as a firewall just fine.

in two years of using it,nothing has ever gotten into my system.

you are right,it's not as sophisticated as the $3000 cisco gear,but for $80 it works just fine for me.
Tebore
12-19-01, 02:13 PM
I have used Zonealarm and Tiny Personal Fire wall. I like TPFW better because it gives you control over all things accessing the web. Zonealarm to me is kinda bloat ware.