acuariano
Premium
join:2004-10-27
Woodside, NY
 ·Verizon Online DSL
| about firewall? windows firewall and router firewall
hi guys i have a question..
since i need to cut doen on resources..i was advice in another site,that a rouetr firewall works excellent fo that along with windows firewall enable,so there is no need for those firewall third party programs.
i like to hear your comments about it.
-ihave westell 327w xp-pro-sp3 |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL | I am quite satisfied running behind a router, with just Windows firewall. And the only reason I leave Windows firewall on, is because it complains otherwise.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
acuariano
Premium
join:2004-10-27
Woodside, NY
·Verizon Online DSL
| reply to acuariano
nwrickert...thanks for a quick response..
and now my question is,,what settings do i have to use :
i have 5 settings with this router.
Custom Security (Custom)
No Security (None)
Minimum Security (Low)
Typical Security (Medium)
Maximum Security (High) |
|
acuariano
Premium
join:2004-10-27
Woodside, NY | reply to acuariano
nwrickert..are you using these settings posted by N O Y B ?
at »Harden Your Westell 327 Firewall
FIRST POST. |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
 ·AT&T U-Verse
·AT&T Midwest
| reply to acuariano
I am just using "none" for the router firewall.
The NAT functionality is still giving you protection. Unsolicited packets are dropped, unless to a port-forwarded service. That's quite enough for my needs.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
acuariano
Premium
join:2004-10-27
Woodside, NY
1 edit | reply to acuariano
so you choose this one: "No Security (None)
All traffic is allowed. "
and what about windows firewall,you just tick "on-recomended" ..what about the "don't allow exceptions box"
--DIS you run a firewall test at "shields up" site? |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest
| said by acuariano  :so you choose this one: "No Security (None) All traffic is allowed. " Yes.
and what about windows firewall,you just tick "on-recomended" ..what about the "don't allow exceptions box" I just take the defaults.
--DIS you run a firewall test at "shields up" site?
I show fine at that site. I show port 25 and port 22 open. That's because I am port-forwarding them to my linux box. And the port for remote modem management is open, but doesn't do anything since I have remote management turned off (the default, as I recall).
The way a NAT router works, when an outbound connection is made the router adds an entry to its NAT table so that reply packets can be sent to the correct machine on your LAN. If a packet is received for which there is no entry in the NAT table, the packet is dropped. So connections initiated from outside are impossible unless you do port forwarding (hardwire entries in the NAT table).
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
acuariano
Premium
join:2004-10-27
Woodside, NY | reply to acuariano
thanks for the reply,,and 1 more question..besides this then,
you obly use an antivirus..[which one you use].
-and what about antirootkit,ad-banners blockers |
|
nwrickert
sand groper
Premium,MVM
join:2004-09-04
Geneva, IL
·AT&T U-Verse
·AT&T Midwest
| said by acuariano :thanks for the reply,,and 1 more question..besides this then, you obly use an antivirus..[which one you use]. I'm using Mcafee Enterprise. My employer site license allows (and encourages) use at home. It's pretty bloated, so I would switch if I were short on resources. But I mainly use linux, so resources when booted to Windows are not a big problem.
-and what about antirootkit,ad-banners blockers
I do login to Windows as a limited user (except when doing administrative things). I am relying on the reduced privileges of a limited user account for protection against the unlikely event of a root kit. I use flashblock and noscript extensions with firefox, and they protect against the most obnoxious ads. The static banner ads don't bother me - they are the price we pay for content.
--
AT&T dsl; Speedstream 5100b modem; openSuSE 11.0; firefox 3.0.11 |
|
acuariano
Premium
join:2004-10-27
Woodside, NY | reply to acuariano
ok thanks nwrickert |
|
