Re: Novice Networker Needs Guidance
- From: Chuck <none@xxxxxxxxxxx>
- Date: Wed, 31 Jan 2007 08:40:33 -0800
On Tue, 30 Jan 2007 23:12:00 -0800, MJS <MJS@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:
What is a "NAT" router?
My Zone Alarm firewall program does not appear to have any options
pertaining to File Sharing or "ports 137-139 TCP/UDP." Under the advanced
options of my firewall, I have checked "allow outging DNS/DHCP" in the
Trusted Zone and the Internet Zone on High setting.
When I close the Zone Alarm program, will my computer be protected by the
windows XP firewall that is still operating on the other computer in my
network? If not, would my Windows ME computer be at much risk if I do not
have any internet browsers open?
A NAT router is any typical home router, that's used for connecting multiple
computers to your Internet service.
<http://nitecruzr.blogspot.com/2005/05/what-is-nat-router.html>
http://nitecruzr.blogspot.com/2005/05/what-is-nat-router.html
A NAT router protects at the perimeter. Windows Firewall, and Zone Alarm,
protect at the individual computer. Both perimeter and individual protection
are part of a layered security strategy.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html
Windows Firewall provides the same protection as Zone Alarm. WF replaces
Internet Connection Firewall (XP pre SP2), which provided incoming protection
only. ICF replaced "no protection" (pre XP). Pre XP, and then XP pre-SP2,
motivated the development of Zone Alarm and similar "personal firewalls". Zone
Alarm is shiny, and has some good control features that WF doesn't. But WF is
as good as ZA in many ways, is more stable in general, and is more controllable.
Any computer, connected to the Internet, with browser open or not, is at risk.
<http://nitecruzr.blogspot.com/2005/05/security-by-obscurity.html>
http://nitecruzr.blogspot.com/2005/05/security-by-obscurity.html
But every firewall has to have the ability to open specific ports, like 137 -
139, for specific purposes, for designated subnets or individual computers.
That's called granularity. If it doesn't, you end up disabling / un installing
the firewall in question, which is called "no protection".
--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.
- References:
- Re: Novice Networker Needs Guidance
- From: MJS
- Re: Novice Networker Needs Guidance
- From: Chuck
- Re: Novice Networker Needs Guidance
- From: MJS
- Re: Novice Networker Needs Guidance
- From: Chuck
- Re: Novice Networker Needs Guidance
- From: MJS
- Re: Novice Networker Needs Guidance
- Prev by Date: Re: Can I use a switch on a peer to peer network?
- Next by Date: Re: Protecting Folders
- Previous by thread: Re: Novice Networker Needs Guidance
- Next by thread: Re: Local Area Connection Disabled
- Index(es):
Relevant Pages
|