Re: Is XP Firewall Sufficient?

From: Chuck (none_at_example.net)
Date: 03/12/04


Date: 12 Mar 2004 10:51:05 -0600

On Thu, 11 Mar 2004 18:00:34 -0800, "Jude" <anonymous@discussions.microsoft.com>
wrote:

>Guess my subject line says it all. I have activated the
>XP firewall, have installed Spybot S&D, have McAfee
>viruscan online, and Google popup blocker. Is my computer
>properly protected? I am concerned about indiscriminately
>downloading protection software of one sort or another,
>thinking that one might interfere with another.
>So........ what ARE the necessary defenses these days?
>
>Also - is there a way to search newsgroups to avoid asking
>questions that have probably already been asked?
>
>Thanks!
>Jude

Jude,

XP ICF is better than nothing. It is somewhat limited in logging of detected
threats. It also is limited in that it is a Microsoft product, and resolution
of any known weaknesses are slowed by the usual Microsoft update cycle.

As you've indicated by your post, it (or any other software firewall) is only
one component in a layered defense.

The first layer is a NAT router (hardware firewall). If you have broadband
internet, or PPP-compatible dialup internet, you can use a hardware firewall.

The second layer is a software firewall. See various discussions in
comp.security.firewall for good advice on this choice.

The third layer is good software. This layer contains many parts.

AntiVirus protection. Realtime, plus a regular virus scan.

Adware / spyware protection. Realtime, plus a regular adware / spyware scan.
Complete instructions, using Spybot S&D and HijackThis (both free) are here:
http://www.spywareinfo.com/forums/index.php?showtopic=5187

Harden your browser. There are various websites which will check for
vulnerabilities, here are three which I use.
http://www.jasons-toolbox.com/BrowserSecurity/
http://bcheck.scanit.be/bcheck/
https://testzone.secunia.com/browser_checker/

Harden your operating system. Check at least monthly.
http://windowsupdate.microsoft.com/

Block possibly dangerous websites with a Hosts file. Three Hosts file sources I
use:
http://www.accs-net.com/hosts/get_hosts.html
http://www.mvps.org/winhelp2002/hosts.htm
(The third is included, and updated, with Spybot (see above).

Maintain your Hosts file with:
eDexter <http://www.accs-net.com/hosts/get_hosts.html>
Hostess <http://accs-net.com/hostess/>
Hosts File Reader
<http://members.shaw.ca/techcd/VB_Projects/HostsFileReader.exe>

The fourth layer is common sense. Yours. Don't install software based upon
advice from unknown sources. Don't install free software, without researching
it carefully. Don't open email unless you know who it's from, and how and why
it was sent.

The fifth layer is education. Know what the risks are. Stay informed. Read
Usenet, and various web pages that discuss security problems. Check the logs
from the other layers regularly, look for things that don't belong, and take
action when necessary.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.



Relevant Pages

  • Re: Network Security Help Please
    ... I already have a fairly hardened system using Tiny Firewall Pro 6.0 on the ... > layer is necessary because no layer produces complete protection. ... Don't install software based ...
    (comp.security.firewalls)
  • Re: question about hardware firewall
    ... basic protection. ... protection - just as the outermost layer of protection. ... The first layer is your NAT router (hardware firewall). ...
    (comp.security.firewalls)
  • Re: Linksys router and Norton Internet Security
    ... I've been running Norton Internet Security ... >on the PCs for firewall and antivirus protection. ... >having Norton Internet Security (firewall component) on the PCs ... A NAT router is a good outer layer of defense. ...
    (comp.security.firewalls)
  • Re: XP(home) firewall good?
    ... as the user can turn off the firewall and program ... > Yes, outgoing firewall protection is not a cure all, but is a helpful extra ... What is the "extra layer of protection" to the "extra ... security service design and security evaluations: ...
    (comp.security.firewalls)
  • Presentation: Bypassing client application protection techniques with notepad
    ... Bypassing client application protection techniques ... Kerio Personal Firewall 4.0 ... Last years were revolutionary for network services infrastructure ...
    (NT-Bugtraq)