A Broadband and ADSL forum. BroadbanterBanter

Welcome to BroadbanterBanter.

You are currently viewing as a guest which gives you limited access to view most discussions and other FREE features. By joining our free community you will have access to post topics, communicate privately with other members (PM), respond to polls, upload your own photos and access many other special features. Registration is fast, simple and absolutely free so please, join our community today.

Go Back   Home » BroadbanterBanter forum » Newsgroup Discussions » uk.telecom.broadband (UK broadband)
Site Map Home Register Authors List Search Today's Posts Mark Forums Read Web Partners

uk.telecom.broadband (UK broadband) (uk.telecom.broadband) Discussion of broadband services, technology and equipment as provided in the UK. Discussions of specific services based on ADSL, cable modems or other broadband technology are also on-topic. Advertising is not allowed.

Router firewalls - no need for Zonealarm ?



 
 
Thread Tools Display Modes
  #1  
Old February 12th 04, 10:06 PM posted to uk.telecom.broadband
zero
external usenet poster
 
Posts: 19
Default Router firewalls - no need for Zonealarm ?

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?

i supppose i could install zone but turn it off when used with the router
to save resources and some comments on zonealarm using bandwidth

thanks



  #2  
Old February 12th 04, 10:18 PM posted to uk.telecom.broadband
eusty
external usenet poster
 
Posts: 31
Default Router firewalls - no need for Zonealarm ?

zero wrote:

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?

i supppose i could install zone but turn it off when used with the router
to save resources and some comments on zonealarm using bandwidth

thanks



Dump ZA and stick with the routers firewall, just make sure you have
configured it properly.

--
eusty
UK Broadband Usergroup : http://www.uk-bug.net

(¯`·._.· All Outgoing Mail Scanned Virus Free ·._.·´¯)
  #3  
Old February 12th 04, 10:22 PM posted to uk.telecom.broadband
David Bradley
external usenet poster
 
Posts: 60
Default Router firewalls - no need for Zonealarm ?

On Thu, 12 Feb 2004 22:18:05 +0000, eusty
wrote:

zero wrote:

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?

i supppose i could install zone but turn it off when used with the router
to save resources and some comments on zonealarm using bandwidth

thanks



Dump ZA and stick with the routers firewall, just make sure you have
configured it properly.


Perhaps you would care to eloborate on "configuring it properly"; I
would say for the vast majority it is just fine with factory defaults.

Now with Zone Alarm I came across a configuration the other day that
was blocking auto updates from Norton! So much for having a raincoat
and not wearing it when its chucking it down.

David Bradley

  #4  
Old February 13th 04, 02:59 AM posted to uk.telecom.broadband
Chris Blunt
external usenet poster
 
Posts: 104
Default Router firewalls - no need for Zonealarm ?

On Thu, 12 Feb 2004 22:06:58 -0000, "zero"
wrote:

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?


Don't dump Zone Alarm. The router firewall will protect you from
incoming attacks, but Zone Alarm will also block outgoing connections
from rogue applications running on your PC.

  #5  
Old February 13th 04, 03:52 AM posted to uk.telecom.broadband
Hiram Hackenbacker
external usenet poster
 
Posts: 118
Default Router firewalls - no need for Zonealarm ?

On Fri, 13 Feb 2004 10:59:23 +0800, Chris Blunt
wrote:

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?


Don't dump Zone Alarm. The router firewall will protect you from
incoming attacks, but Zone Alarm will also block outgoing connections
from rogue applications running on your PC.


As can the filters on the Draytek. Having one set of firewall rules
(in and outbound traffic) is preferable to having to maintain ZA on
one or more connected PC's.

Of course you could use both.

--
Hiram Hackenbacker
  #6  
Old February 13th 04, 08:21 AM posted to uk.telecom.broadband
Clint Sharp
external usenet poster
 
Posts: 550
Default Router firewalls - no need for Zonealarm ?

In message , Martin²
writes
The Draytek comes pre configured with all ports stealthed etc.,
so unless you make changes is as safe as can be. (Not the case with all
routers)
One thing to note though. The only thing accessible from the net on your
allocated IP is the router set up page.

How can it be 'stealthed' if you can access the config page from the
outside world? Surely this means it's responding to 'SYN' packets and,
by definition, isn't 'stealthy'.
If you leave it blank with no password someone could mess with it !

Definitely not a 'good thing' to have happening.
Regards,
Martin




--
Clint Sharp
  #7  
Old February 13th 04, 10:37 AM posted to uk.telecom.broadband
Tiscali Tim
external usenet poster
 
Posts: 70
Default Router firewalls - no need for Zonealarm ?

In an earlier contribution to this discussion,
Hiram Hackenbacker wrote:

On Fri, 13 Feb 2004 10:59:23 +0800, Chris Blunt
wrote:


Don't dump Zone Alarm. The router firewall will protect you from
incoming attacks, but Zone Alarm will also block outgoing connections
from rogue applications running on your PC.


As can the filters on the Draytek. Having one set of firewall rules
(in and outbound traffic) is preferable to having to maintain ZA on
one or more connected PC's.



Not sure how the router filters would work in the case of picking up a
trojan which "calls home". ZA would detect and warn that a new application
was trying to access the internet. What would the router filters do under
these circumstances if you weren't also using ZA?
--
Cheers,
Tim
______
Please reply to newsgroup. Reply address is Black Hole!


  #8  
Old February 13th 04, 11:15 AM posted to uk.telecom.broadband
Daniel James
external usenet poster
 
Posts: 60
Default Router firewalls - no need for Zonealarm ?

In article , Hiram
Hackenbacker wrote:
As can the filters on the Draytek. Having one set of firewall rules
(in and outbound traffic) is preferable to having to maintain ZA on
one or more connected PC's.


ZA and the likes have the advantage that they tell you which
application is trying to make an internet connection. The router will
prevent connections to odd addresses/ports but can't tell you where
they came from, and any ports you don't filter are wide open.

If you get a virus/worm that runs its own SMTP server ZA will catch
it, but the router will just see SMTP traffic that will be
indistinguishable from normal EMail and will let it through.

Cheers,
Daniel.


  #9  
Old February 13th 04, 12:02 PM posted to uk.telecom.broadband
John Rumm
external usenet poster
 
Posts: 118
Default Router firewalls - no need for Zonealarm ?

Daniel James wrote:

ZA and the likes have the advantage that they tell you which
application is trying to make an internet connection. The router will
prevent connections to odd addresses/ports but can't tell you where


ZA can be handy in these cases - but it can also cause undue concern for
users by reporting loads of stuff that you really don't need to know. In
you need to, a correctly setup router can usually log information about
which PC, which port, which addresses etc. attempted a connection.

they came from, and any ports you don't filter are wide open.


Standard practice for router setup *should* be to block all traffic in
and out by default. Then create specific rules to enable the outgoing
ports you need.

If you get a virus/worm that runs its own SMTP server ZA will catch
it, but the router will just see SMTP traffic that will be
indistinguishable from normal EMail and will let it through.


This is true - but with a well configured firewall and sensible email
precautions you should not be getting a worm in the first place ;-)


--
Cheers,

John.

/================================================== ===============\
| Internode Ltd - http://www.internode.co.uk |
|-----------------------------------------------------------------|
| John Rumm - john(at)internode(dot)co(dot)uk |
\================================================= ================/
  #10  
Old February 13th 04, 03:07 PM posted to uk.telecom.broadband
Phil McKerracher
external usenet poster
 
Posts: 38
Default Router firewalls - no need for Zonealarm ?


"Chris Blunt" wrote in message
...
On Thu, 12 Feb 2004 22:06:58 -0000, "zero"
wrote:

Thinking of something like the new Draytek Wireless router

http://www.draytek.co.uk/products/vigor2600g.html

with this sort of thing for a home network

do you still need something like zonealarm on each pc
or is the router firewall good enough ?


Don't dump Zone Alarm. The router firewall will protect you from
incoming attacks, but Zone Alarm will also block outgoing connections
from rogue applications running on your PC.


Outgoing filters are more trouble than they're worth, in my humble opinion
(except where an expert is employed to set up the rules and maintain them).
What's wrong with a virus checker for detecting rogue applications?

--
Phil McKerracher
www.mckerracher.org


 




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump

Similar Threads
Thread Thread Starter Forum Replies Last Post
ICS /ZoneAlarm King Queen uk.telecom.broadband (UK broadband) 6 February 10th 04 04:18 PM
ICS & Firewalls Trevor Dennis uk.telecom.broadband (UK broadband) 11 September 19th 03 08:44 PM
firewalls / anti virus John Hood uk.telecom.broadband (UK broadband) 9 September 11th 03 10:53 PM
Newbie confused by firewalls John Edwards uk.telecom.broadband (UK broadband) 7 August 12th 03 09:26 PM


All times are GMT +1. The time now is 07:55 AM.


Powered by vBulletin® Version 3.6.4
Copyright ©2000 - 2019, Jelsoft Enterprises Ltd.Content Relevant URLs by vBSEO 2.4.0
Copyright ©2004-2019 BroadbanterBanter.
The comments are property of their posters.