Firewalls

[hukarez]

Is anyone out there working with a firewall setup?

I'm making the switch from DSL to Cable by next week, and understand that I'll be DHCP as opposed to my old static IP. My only concern is, folks seeing my machines on their "network" and all, and trying to access files and the like. Anyone recommend a particular setup? All the machines are on XP Professional. Any advice would be most appreciated!

[albionmoonlight]

I have Zone Alert (or maybe it's Zone Alarm) because it is free. I have no idea if you need something stronger than that. If so, I am of no help to you.

[hukarez]

Well, don't think I'll need anything stronger. My beef with most firewall software, is that it tends to bog down my machines. In particular: Norton.

I've never had cable internet before - nothing short of what I had back when I was at UCSB in 96, in the dorms. Even then - I was able to go about and see other folks' machines on my network places, which was a bit of a concern on my end. That's what I'm particularly striving to avoid - having other folks in my area try and check out my devices via that particular method.

[Masked]

Zone Alarm is very good and it is free. It's only downside is that it is software based and thus will take up some of your systems resources. I have had zone alarm on several different machines and it doesn't seem to be a particularly big resource hog.

[hukarez]

On another note, I noticed in XP Professioanl, they have a little "Internet Firewall" type of protection listed as a check box in the options. Is this alright to keep me hidden from other people's "My Network Places" list? :confused:

[Primal]

Software firewalls don't do much. I'd suggest getting a Linksys router with a Firewall built in. Not only will you have the firewall but then you can share the internet connection throughout the house.

[jeff061]

I'd buy a Linksys Cable/DSL router, plug the DSL modem into the WAN port of the Linksys router, plug your computer into a LAN port in the router, setup your user name one the router(there is a Web based interface, its all in the instructions), and not worry about any software firewall. And also enjoy the freedom of plugging more than one system into a DSL line.

Doesn't need to be Linksys of course, but i like the new Linksys routers being put out by Cisco. Probably cost about 40 bucks these days for a non wireless version.

Also, i don't think you can go out and see other systems on your network through network neighborhood. I think this only happened with cable, not dsl, but doesn't even happen with cable anymore. However you are still open to attacks and the need of a firewall is no less.

[Draft Dodger]

Primal and Jeff are correct.
just get a router and don't worry about.

Zone Alarm is nice to run every once in a while (once a month?)...just to easily monitor traffic in and out for a day or so. other than that, the NAT firewall built into most (all?) routers is fine.

[hukarez]

Ah, then the Linksys that I have now would be most effective then? I wouldn't have to tinker around with my XP settings? I was running 3 machines off my Linksys with DSL....just wasn't sure how to go about with a proper configuration for DHCP on a router and the like. Much thanks, folks!

[jeff061]

Only thing you may need to change on the router is your connection type(will probably need to be PPPoE, may already be), and changing your user name and password.

Are you using DHCP on your computers already? If so you shouldn't need to change anything with them.

[hukarez]

Well, my router's set up with the Static IP address. The machines are all at DHCP. I'd probably have to tinker around with the router's settings and all...plus, I would imagine the security protocols would need adjusting. I'm just hoping to tweak it to a decent standard at the least, rather than inadvertently leaving a port open or what not.

[jeff061]

Just don't set up any port forwarding, except for what you have to. Be as specific as you can as well. Shouldn't be a probem.

[finkenst]

or get alinux box and run the firewall software on it.

[jeff061]

Linux people crack me up sometimes.

[Franklinnoble]

Firewall?

Like that could stop me.

As soon as I got her account number, I couldn't spend it fast enough....

[hukarez]

Just don't set up any port forwarding, except for what you have to. Be as specific as you can as well. Shouldn't be a probem.
Hey jeff061, I really appreciate the input. To be honest - when I first setup the router and all with my DSL account, I really didn't have much clue with regards to port settings and all. Which to open, and which to can. I don't think I've ever done any port forwarding at all whatsoever.

Are there general, obvious ports that I should close, to be on the safe side? Clearly, any sort of 'security' I'd probably want to get out of the way first hand would be all the settings on my Linksys router. It's a simple 8 port router and switch, which basic and advanced settings and the like.

[Tasan]

In the Linksys, all ports are "closed" until you specifically to open them. As long as you haven't changed anything, you should be good to go.

[hukarez]

Thanks, Tasan. I'll keep this in mind, when I go to re-configure my router. No other specific 'tweaks' I should do aside from the ports?

[Tasan]

Depending on who you go with for cable, you might have to flash the bios. Its pretty simple with Linksys routers, but plug in first and see if everything works. If it doesn't you probably won't need to worry about them unless you want some of the features they add in.

[hukarez]

Depending on who you go with for cable, you might have to flash the bios. Its pretty simple with Linksys routers, but plug in first and see if everything works. If it doesn't you probably won't need to worry about them unless you want some of the features they add in.
Aye, I'm going with Cox, since they're the providers in my area. As far as keeping the Linksys updated...I managed to give it a Firmware update and stuff; it only had 1 update for my particular model. My networking's gone down the chute...haven't done this in awhile!