Firewall and 56k connection?

[Alakazam]

I've never run a software firewall (like zone alarm) on my machine but the more I'm learning about some of the nasty stuff taking place out there, the more inclined I am to use it. I have a 56K connection so my address changes a lot, but sometimes I'm on for a couple hours straight so a probe could become reality, what do you guys think?

[DragonAce]

do it...
it doesn't take long for an established bot to squeek out..and zone stops traffic both ways should you have one..
you control what comes in and goes out..it'll ask you and you can tell it to remember what you want to allow, or have it ask you each time..

do it..

[ImaginAsian]

Although you are using a dialup which assigns you a dynamic IP everytime you connect, you are doing the right thing Zammy with a Software FireWall...especially if you stay on for long periods of time with your connection. Probably pretty safe without one...but you never know.

Us broadband folks bring in the heavy artillery with the Hardware Router :yes:

[DragonAce]

IA..ditto that on the router bit..
i have 4 behind it and one opened up and using zonealarm..
the 5th i had to open up due to f/t's and the like in ICQ..
trying to set up the router to only open for 1 rig was a nightmare and i didn't want to go full dmz so..and setting up certain ports just frizzied my brain cells :D (the linksys manual is good, but can be a little confusing to a newbie at that kinda thing..

if ya got's the cash..router is the way to go..

[floppybootstomp]

You can d/l Zone Alarm in our very own downloads section, the section you have kindly donated to... :)

I'm on dial-up and I use it (heads up to DA for pointing me there). You'd be surprised how much crap it blocks. It was particularly busy when that Code Red Virus was doing the rounds.

[Techvillage]

You really need something.

You think to your self, I'm on dialup , I gotta dynamic IP, I'm safe. Well maybe if you only went only for 3 minutes at a time.

There are soooo many people scanning on the Internet, your PC would be scanned at least 10 times in 10 minutes (my firewall logs show more frequent than that)

Also, you say "nobody is gonna be interested in little old me." But the chances are you are being scanned by an automated program, that will log your IP address for a closer look later - that later could be 15 minutes later. And most of this is done by kids who want to try and dump Sub 7, see what you got on your PC, just poke around etc......

If you are running, 98 or ME you really need to make some security changes. Go to Steve Gibson's site and take his Shields Up test, and then take a good read of what he recommends about securing a PC.

Aplologies if I'm teaching grandma how to suck eggs.

[Alakazam]

Thanks alot guys for your input, sometimes I get a little too paranoid about stuff but not this time I guess. I'll dl in a bit & get it installed tonight. When we move & I get a cable modem is a software program good enough or should I go the router route and make sure, btw what does a decent hardware firewall run?

[ImaginAsian]

I suggest going the hardware route. Software firewalls are just like any software...they can be infected with viruses :)

Hardware routers are quite cheap nowadays...a good one can be had for about $50 for a 4-port router + printer share + firewall. A very good one is the SMC Barricade which there is a deal posted in the Hella Sweet Deals forum.

I have the Linksys 4-port and it work fine for me...although I would like to get the SMC one day.

Just make sure you get a firewall which can operate in stealth mode, which not only blocks access but it also doens't respond back to a ping from an unauthorized source, therefore keeping your IP address "cold" and not live.

[Alakazam]

Thanks IA, I dl'd ZA and have it set up now, went to the Gibson site and all appears well. I think when I get cable access I will then go the router route.:lol: :lol: :lol: I've had a few notices about probes already & it's only been a couple of hours. Do you have it set up to pop-up and notify you or just ignore and keep on truckin?

[DragonAce]

originally it's nice to have it pop up..
just to see that it's doing it's job right..

but after the first 25 or so pass on the pop ups and kill the log..
i get around 500 "hits" a day, so for me to have that thing active would drive me nuts..

btw FBS...anytime...

[Case]

So, Zammy - you ever get moved and on cable, or are you still on dialup?

[Mad dog]

I'd just like to point out that Steve Gibbson isn't all he's craked up to be. He may know his stuff, he can program in assembly and knows how to write code, but he aint all that smart. He's a geek who is totally obsessed with what he does which is why he is so good at it. He's said and done some very stupid things because he doesn't have much experience dealing with the real world. He predicted the demise of the internet because of Windows XP!

His shields up test isn't all the brilliant. It only seems to test whether your firewall will block an attempt buy a trojan on your PC to connect to an outside source along with a few simple port tests. This doesn't prove much as you would actually have to be dumb enough to install the trojan in the first place. Some people are but i don't think any of them reside on this forum.

AS you can probalby detect i don't like him, and suggest you read the archives at the www.theregister.co.uk to hear about all of his exploits.

You can of course use a lunix sandbox firewall if you want as an alternative to zonealarm and desptie what many say BlackICE defender does a very good job as a packet filter picking up things that zonealarm used to miss on my system.

But there is no better way to be secure than to use common sense. Unless there is a hole in your OS, and you don't install apps that you are unsure of, then you should be safe.

[Alakazam]

Case: Still not moved, still on dial-up, still using ZA :lol:

MD: I've been hearing some stuff about Gibson lately, one of these days I'm going to take some time and read up, tnx.