Do I need a firewall?

I have McAfee Virus Protection and am getting a popup that my firewall (I think it was a trial version) needs to be renewed. Do I need the firewall protection..or do I already have protection w/OpenBand?

 

That's up to you... Here's another way to look at it. Do you need a home alarm or do you think the Loudoun County Sherrifs office will do enough to protect your home?

Most ISPs don't filter any traffic or if they do it's minimal. So I wouldn't depend on your ISP protecting you. The one exception seems to be some of the major dial-up ISPs.

 

I'm not sure about this, but I don't think that OpenBand is like a traditional ISP. Is it? I thought that Broadlands South had a community firewall through OpenBand. That doesn't protect someone from an attack from within the community firewall (i.e., another Broadlands South resident), but I thought it would protect you from external attack.

That said, I have a firewall/router installed in my NID (the panel where the OpenBand fiber enters your house and is distributed to your Multimedia outlets throughout your home).

See these threads for firewall/networking discussions:
http://www.hoa.broadlands.org/forum/topic.asp?TOPIC_ID=985
http://www.hoa.broadlands.org/forum/topic.asp?TOPIC_ID=976

 

Just install ZoneAlarm. It's free and easy to figure out.

http://www.zonelabs.com/store/content/company/products/znalm/freeDownload.jsp

 

I would say yes. Even if you live in Broadlands South, I would have some kind of protection. The community "firewall" in Broadlands South doesn't do too much. I threw a sniffer on my Openband connection when I first moved in and was amazed at what I saw (this was before I got my static IP).

Don't count on your ISP to protect you.

MJD.

 

Yes, you need a firewall unless you're comfortable with leaving your computer's "front door" wide open. Go to www.grc.com, click on one of the logos to go to the next page, scroll down to the Hot Spots section, and run ShieldsUP! and LeakTest. If you don't like the results of these tests, get the free version of ZoneAlarm at http://www.zonelabs.com/store/content/catalog/products/sku_list_za.jsp. Upgrade to one of the paid versions if you prefer the additional protection capabilities, but the free version provides the same basic firewall protection as the paid versions.

 

I realize that alot of people like ZoneAlarm, but I'm finding that many of my customers like Norton's Personal Firewall as it is very easy to install/use, and it meshes seemlessly with other Norton/Symantec programs. YMMV, but I'd like to hear pros and cons about it !!



Neil Z.
Resident since 1999

 

If you have Windows XP, you have a built-in firewall option for each network connection.

 

http://theinquirer.net/?article=17010

[)]

 

I found a great article that details some of the new features of Windows XP Service Pack 2 (which is going to be released sometime in Septemeber). There are a bunch of security updates and new features like easier firewall and wireless setup.

Check it out http://www.informationweek.com/story/showArticle.jhtml?articleID=22103525

 

Returning to my original question about getting a firewall...if I do subscribe to, let's say, Norton's Personal Firewall...it would only protect my computer, not all computers in the house, correct? One thing I notice in their terms of agreement (yes, I actually read it!) is that they will automatically renew you and rebill your credit card every year...not too crazy about that. Pats_Fan, did you have to have the firewall/router installed in your NID, or was it already installed by OpenBand when you moved in?

 

you can get free versions of sygate or zonealarm that would do the job...

personal firewalls can block stuff that regular firewalls might just pass right out to the internet...

 

Unless you have a computer that you can setup as the network firewall, you will need to have a copy of a firewall on each machine that accesses the Internet.

I've not seen where Norton Firewall will automatically resubscribe and charge your account after the first year. I've installed this firewall on a number of machines, and it does not ask for any financial information (credit or debit card) at all. If you're downloading it, again, I've not seen that option to automatically update and charge you after the annual subscription is over. Normally, you will get notice a month before the subscription ends that you need to renew. The cost is usually $19.95, a lot cheaper than having someone come in to clean out your computer.



Neil Z.
Resident since 1999

 

True, but I find that Norton's is much easier to understand by the non-techie, not to mention that it is constantly being updated with new program signatures during its Live Update.

Again, YMMV!

Neil Z.
Resident since 1999

 

All OpenBand installed was a 16-port "switch" to route the internet signal to the data ports throughout my house. (Most people probably only have an 8-port switch. I needed the 16 b/c I have 12 data ports in my house).

I installed a D-link router/firewall from www.bestbuy.com (http://www.bestbuy.com/site/olspage.jsp?type=product&skuId=4634168&id=1051384473833&cmp=++ ) between the fiber converter and the switch, and "stuffed" it into my NID. It only took about 20 minutes (total) to install and configure -- my computers were "talking" to each other in no time.

Here's a question of my own, however: how do I know the firewall is working? Is it automatic?

 

If you have access to an external linux box, you can run nmap on your IP and see what it returns. Otherwise, run that Shields Up test at www.grc.com.

Also, see if your firewall has any logging functions...thats the easiest way to see whats happening.

 

When did Microsoft become known for their security products? If the SP2 firewall can be hacked, it will be hacked. I recommend a different firewall than what Microsoft provides in XP. It's hard to get cheaper and better than the free ZoneAlarm version, which is also updated on a regular basis for enhancements instead of security patches.

 

If you have multiple computers in your house, then your best bet would be to go with a firewall/router (like what Pats_Fan used). These devices are really straight forward and very simple to configure.

 

I was posting the article to let people know about the new features in SP2 - not advocating that people use it solely for firewall support. I haven't seen any articles detailing any security vunerabilities in SP2 (other than the one previously posted about the piracy problem).

But be warned that just because you have a hardware firewall or non-Microsoft firewall software you are *not* immune to hackers.

Check out this link: http://www.antiserver.it/Exploits-World/

This shows the latest 100 exploits that hackers can use. A number of them are against DLink and Linksys routers.

 

Thanks, Brim. This is a cool site. I ran the Shields Up test from home, and determined that my firewall is pretty strong. One question: port 113(auth/ident) was listed as operating in "closed" mode instead of "stealth" mode. I read a little bit about this port, but my question for you techies is: should I take the necessary step(s) to "stealth" it, or is my system safe enough with this port "closed?" Thanks in advance for your advice.