kerio firewall...mnosteele

battman8 · Post by **battman8** » Fri Jul 01, 2005 11:05 pm

hey just a quick question about firewall...
if i am on broadband connection thru a wireless router do i need this firewall software?
I thought if I was behind a router i wouldnt need one...
truth be told i dont have anything encrypted w/router...
what do you think?

I have a D-link router and a D-link wireless router...

Thanks

mnosteele52 · Post by **mnosteele52** » Fri Jul 01, 2005 11:08 pm

I recommend using a software firewall as well as a hardware firewall since a router (hardware firewall) only blocks incoming attacks, it does not block any outgoing data.

Also, make sure you are using WPA encryption with your wireless.

battman8 · Post by **battman8** » Sat Jul 02, 2005 5:40 pm

thanks again

Respice · Post by **Respice** » Sat Jul 02, 2005 11:54 pm

It's not inherently true that a hardware firewall 'only' blocks incoming traffic. While most people tend to view it that way, they are easily configurable to block outgoing traffic as well. A sophisticated hardware firewall encompasses all layers of the OSI model and are ideal from a security perspective. From the physical segregation of networks all the way to deep packet inspection of the application layer.

For the casual internet commuter a software firewall (which is really a host based IPS) is recommendable for it's simplicity and tendency to be robust enough for the average person.

For anyone curious enough with even just a spare p.o.s. computer (with at least a cd-rom drive) I suggest looking into devil linux. It's a bootable CD which means no installation of any kind. It only requires you to learn a few things about linux and iptables more specifically to configure. You can transform any desktop into a well-oiled firewall.

For anyone not curious enough, a NAT router and <insert favorite personal firewall software here> are sufficient to protect you against 99% of internet borne threats.

mnosteele52 · Post by **mnosteele52** » Sun Jul 03, 2005 9:33 am

True Respice, but what you are talking about is way over the average users head.