best firewall?

**BlackSheep** · 29-07-2003, 02:18 PM

Originally posted by Agent
ZA also likes to stop quite a few LAN games randomly, even when you "unload" it as its still hiddenly loaded.
Just got my router todo it now, with custom rules for what i need

Router with integrated firewall is the best way to go, having a software firewall sitting on a PC directly connected to the net is never the best idea.

**DaBeeeenster** · 30-07-2003, 05:39 AM

Originally posted by BlackSheep
Router with integrated firewall is the best way to go, having a software firewall sitting on a PC directly connected to the net is never the best idea.

... unless it's running Linux

**PanzerKnight** · 30-07-2003, 06:08 AM

yeah, got Norton firewall 2003, best firewall i have used so far
Mind u, i've only used Zonealarm

**BlackSheep** · 30-07-2003, 02:16 PM

Originally posted by DaBeeeenster
... unless it's running Linux

even then you are best off running NAT on the *nix box (or smoothwall box ideally) and not working on the gateway, especially if you are running a web server - bad idea to have it sitting on the gateway, better to have it hidden inside the firewall and route to it.

**steve threlfall** · 30-07-2003, 03:37 PM

Just got my new Linksys router from ebuyer and apparently it has built in NAT firewall and ZoneAlarm pro (not full versions) with it.

**DaBeeeenster** · 30-07-2003, 04:03 PM

Originally posted by BlackSheep
even then you are best off running NAT on the *nix box (or smoothwall box ideally) and not working on the gateway, especially if you are running a web server - bad idea to have it sitting on the gateway, better to have it hidden inside the firewall and route to it.

If the box is patched to the latest version of IPTables, why is it going to be any less secure than a router? What do you think routers have inside them?

In fact, there's an argument that they are more secure since the software in them is regularly patched and updated; the same cannot be said for a lot of routers...

http://www.cert.org/advisories/CA-2003-15.html

That's A LOT of cisco routers affected by a security flaw where a few specially malformed IP packets can completely knock over the entire router...

**BlackSheep** · 30-07-2003, 05:05 PM

Originally posted by DaBeeeenster
If the box is patched to the latest version of IPTables, why is it going to be any less secure than a router? What do you think routers have inside them?

In fact, there's an argument that they are more secure since the software in them is regularly patched and updated; the same cannot be said for a lot of routers...

http://www.cert.org/advisories/CA-2003-15.html

That's A LOT of cisco routers affected by a security flaw where a few specially malformed IP packets can completely knock over the entire router...

I'd expect the internal *nix box to have a properly configured IPtables firewall as well of course, should have said - but NAT just adds that further layer of security by masking the Private IP - and of course you security is only as good as your last patch

**DaBeeeenster** · 30-07-2003, 05:14 PM

IPTables performs NAT tho...

**BlackTower** · 30-07-2003, 06:31 PM

Tiny Personal Firewall V2.0 old but still faithful.

**Dorza** · 31-07-2003, 01:53 AM

i got sygate personal fire wall, its great for a free product

U might want to consider Kerio personal firewall, i find thats pretty good to, thats free awell. I use to have ZA but found it crappy.

**Agent** · 31-07-2003, 02:10 AM

Originally posted by DaBeeeenster
IPTables performs NAT tho...

Which does it nicely

Becides, everyone knows that having a unix machine on your network makes you more sexy, so go for it, and pull the ladys.

**DaBeeeenster** · 31-07-2003, 05:41 AM

And that's my reasoning too

**xfactor** · 03-08-2003, 01:37 AM

Used ZA a long time ago. It was working fine until it strangely stopped and blocked my web server for an unknown reason. Everything I tried wasn't good enough to make it work.... so a full unistall along with a registry cleaning got rid of it. I used Norton Perso Firewall, but finally decided to live dangerously w/o a firewall

xfactor

**Furton** · 03-08-2003, 03:24 PM

I'm a big fan of BlackICE firewall. Used to use zonealarm but still got hacked through it, switched to BlackICE and haven't had a problem since.

**Merlin** · 29-08-2003, 11:07 PM

smoothwall on an old machine has to be the best, if you have the floorspace!

**Martin** · 30-08-2003, 12:32 AM

do what i do

Use Zone Alarm and a Hardware firewall

Thread: best firewall?

LinkBack

Thread Tools

Thread Information

Users Browsing this Thread

Posting Permissions