Re: SP2 and hardware firewalls

From: Bruce Chambers (bruce_a_chambers_at_h0tmail.com)
Date: 09/09/04


Date: Wed, 8 Sep 2004 20:01:50 -0600

Bob Davis wrote:
> I have a Linksys router/firewall connected to a 3-comp.
> network, and ShieldsUp (www.grc.com) and other such tests
> report no security holes. Is there any reason I need to
> enable the XP SP2 firewall? I'm running it now with no
> problems, but if it is redundant then I'll disable it.

    If you use a router with NAT, it's still a very good idea to use a
3rd party software firewall. Like WinXP's built-in firewall,
NAT-capable routers do nothing to protect the user from him/herself
(or any "curious," over-confident teenagers in the home). Again --
and I cannot emphasize this enough -- almost all spyware and many
Trojans and worms are downloaded and installed deliberately (albeit
unknowingly) by the user. So a software firewall, such as Sygate or
ZoneAlarm, that can detect and warn the user of unauthorized out-going
traffic is an important element of protecting one's privacy and
security. Most antivirus applications do not even scan for or protect
you from adware/spyware, because, after all, you've installed them
yourself, so you must want them there, right?

    I use both a router with NAT and Sygate Personal Firewall, even
though I generally know better than to install scumware. When it
comes to computer security and protecting my privacy, I prefer the old
"belt and suspenders" approach. In the professional IT community,
this is also known as a "layered defense." Basically, it comes down
to never, ever "putting all of your eggs in one basket."

-- 
Bruce Chambers
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace. Or you can have freedom. Don't ever
count on having both at once. - RAH


Relevant Pages

  • The Big Ol Ubuntu Security Resource
    ... but its default install has flaws. ... are the mods you need to make to protect your system. ... If you've recently switched from Windows to the Linux distribution Ubuntu, ... IT Security has prepared a guide to help you ...
    (microsoft.public.windowsxp.general)
  • The Big Ol Ubuntu Security Resource
    ... but its default install has flaws. ... are the mods you need to make to protect your system. ... If you've recently switched from Windows to the Linux distribution Ubuntu, ... IT Security has prepared a guide to help you ...
    (microsoft.public.windowsxp.general)
  • Re: Hardware vs Software
    ... ZoneAlarm, that can detect and warn the user of unauthorized out-going ... Most antivirus applications do not scan for or protect you ... software firewall in place, your only intrusion protection is the ... everyone always responds with "install NIS" ...
    (microsoft.public.security.virus)
  • Re: How to uninstall SpiderSearchcom Bar?
    ... Don't forget to take steps to protect your system from further abuse. ... enable Windows Firewall. ... install a good anti-virus program, update it daily and let Windows ... Security Center monitor it. ...
    (microsoft.public.security)
  • Re: Other personal firewalls besides Norton?
    ... NAT-capable routers) do nothing to protect the user from him/herself. ... So a software firewall, such ... though I generally know better than to install scumware. ...
    (microsoft.public.win2000.general)