Firewall recommendation - Tilted Forum Project Discussion Community

Slavakion · 05-05-2004, 05:15 PM

I know that there have been posts about this before, but the search turned up conflicting results. It seems that most people either recommended ZoneAlarm or Outpost. Some said that that the one that they didn't use caused funny problems. So... I'm wondering which one would actually be better. I'm looking for something that's easy to set new rules (preferably by a user firendly popup window a la McAfee). I'm running XP on an Athlon if that makes any difference.

By the way, do I need a firewall since I have a router? I think so, since <start bad metaphor> a router is like a stone wall around your computer with sections that can be either open or closed. The problem is that most routers don't guard those open sections. A firewall is like having security examining everything passing through. So with both, you block off most entries for hackers (router) and guard the open sections (firewall).

Well, now that I've rambled on and on, is my understanding of the topic correct? And which firewall is "better"?

Thanks

messy · 05-05-2004, 05:36 PM

I got rid of Norton after my last format, and started using ZoneAlarm. It works great and is extremely user-friendly. Whenever a program starts that tries to access the world outside your PC, it alerts you and asks if you want it to do so. It also alerts you of any incoming threats.

But if you're running a router, you really don't need a software firewall.

Speed_Gibson · 05-05-2004, 06:02 PM

the free version of Kerio 4.x; the main thing that the $40 gets you is the web-ad filtering. They give you a 30 day trial of that and I wanted to pay as soon as it expired but financial concerns have stopped me so far.

sailor · 05-05-2004, 06:04 PM

I am using Sygate.

Yes, most routers include firewalls in them. The issue is that most are turned off by default--you are going to go in and tell it exactly what to block. Its default is all open.

heyal256 · 05-05-2004, 06:34 PM

Personally, when it comes to computer security, I try to err on the side of paranoia. So that means taht not only do I have a router but I am also running a software firewall (zonealarm). I like zonealarm because if I get infected by any viruses, once my rules are setup, it will tell me if the program has changed since it last accessed the internet, and also tell me if something new (that I might not be aware is running) is trying to access the internet.
Besides, the software firewall may provide you with some extra time to patch/clean your system when new viruses/exploits come out.

Hrothgar · 05-05-2004, 06:55 PM

I'm paranoid as well. I have a router and recently installed Zonealarm. So far I'm very happy.

o14real · 05-05-2004, 09:04 PM

I use Sygate Personal Firewall Pro it works great and i've had no problems with it. I've tried Norton, ZoneAlarm, McAfee and a few other and I like Sygates one the best.

Dragonlich · 05-05-2004, 11:22 PM

Sygate was also recently tested as being the best "normal" firewall available (by a Dutch PC mag). It stopped most attacks thrown at it, while the rest didn't do so well at all. That included Zonealarm, which I was using before Sygate.

iamtheone · 05-06-2004, 04:40 AM

Quote:

Originally posted by Slavakion
I know that there have been posts about this before, but the search turned up conflicting results. It seems that most people either recommended ZoneAlarm or Outpost. Some said that that the one that they didn't use caused funny problems. So... I'm wondering which one would actually be better. I'm looking for something that's easy to set new rules (preferably by a user firendly popup window a la McAfee). I'm running XP on an Athlon if that makes any difference.

By the way, do I need a firewall since I have a router? I think so, since <start bad metaphor> a router is like a stone wall around your computer with sections that can be either open or closed. The problem is that most routers don't guard those open sections. A firewall is like having security examining everything passing through. So with both, you block off most entries for hackers (router) and guard the open sections (firewall).

Well, now that I've rambled on and on, is my understanding of the topic correct? And which firewall is "better"?

Thanks

With a cable/DSL type router with NAT enabled you are handed a private IP that is translated out the the internet. This is good, as long as you don't have PAT enabled or have your machine sitting out on the DMZ. There is really no need for a firewall.

IF you want a good firewall, check out CheckPoint. One of the best!

Dragonlich · 05-06-2004, 05:10 AM

As I see it, my router is my incoming firewall, and Sygate is my outgoing firewall. Anything that tries to go from my computer to the internet gets inspected - that should keep spyware/virii/trojan horses quiet.

sailor · 05-06-2004, 05:42 AM

Quote:

Originally posted by Dragonlich
As I see it, my router is my incoming firewall, and Sygate is my outgoing firewall. Anything that tries to go from my computer to the internet gets inspected - that should keep spyware/virii/trojan horses quiet.

Thats my plan too. I like being able to easily restrict what can access the internet, which is exactly what Sygate lets me do. Good piece of software.

Pragma · 05-06-2004, 05:59 AM

Quote:

Originally posted by iamtheone
This is good, as long as you don't have PAT enabled or have your machine sitting out on the DMZ. There is really no need for a firewall.

Well, it's always a good idea to have a firewall - having the ability to do stateful packet filtering and packet analyzation is much better in terms of securing your computer than simply having it behind NAT.

For example, if there's a security flaw in your router and it gets compromised and set up to forward all ports to your computer - or if you do it yourself to play a game and forget to switch it back - you're unprotected.

theburner · 05-06-2004, 06:09 AM

Zonealarm Free Version.. Works for me, and Leo from Tech TV likes it also!

iamtheone · 05-06-2004, 10:49 AM

Quote:

Originally posted by Pragma
Well, it's always a good idea to have a firewall - having the ability to do stateful packet filtering and packet analyzation is much better in terms of securing your computer than simply having it behind NAT.

For example, if there's a security flaw in your router and it gets compromised and set up to forward all ports to your computer - or if you do it yourself to play a game and forget to switch it back - you're unprotected.

Yeah, that is something to considers. As I also mentioned in my advise to make sure PAT is off. But, like you said - anything can happen.

Slavakion · 05-06-2004, 11:45 AM

Well, I decided to go with Zone Alarm. Thanks again.

hrdwareguy · 05-06-2004, 01:44 PM

A day late and a dollar short, but since you are running XP you could have just turned on the WinXP Personal Firewall.

Slavakion · 05-06-2004, 05:47 PM

Yeah, I guess. But it seems that something that easy can't be as effective as a third party solution. But I could be extremely wrong. Oh well.

Pragma · 05-06-2004, 08:05 PM

XP SP1's built in firewall is a bit lacking - but everything I've seen and read about SP2's firewall is that it should rival ZoneAlarm/etc.

If you want to try it out, either download Release Candidate 1 of SP2 from Microsoft's website, or wait until summer.

05-05-2004, 05:15 PM	#1 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	Firewall recommendation I know that there have been posts about this before, but the search turned up conflicting results. It seems that most people either recommended ZoneAlarm or Outpost. Some said that that the one that they didn't use caused funny problems. So... I'm wondering which one would actually be better. I'm looking for something that's easy to set new rules (preferably by a user firendly popup window a la McAfee). I'm running XP on an Athlon if that makes any difference. By the way, do I need a firewall since I have a router? I think so, since <start bad metaphor> a router is like a stone wall around your computer with sections that can be either open or closed. The problem is that most routers don't guard those open sections. A firewall is like having security examining everything passing through. So with both, you block off most entries for hackers (router) and guard the open sections (firewall). Well, now that I've rambled on and on, is my understanding of the topic correct? And which firewall is "better"? Thanks

05-05-2004, 05:36 PM	#2 (permalink)
messy Insane	I got rid of Norton after my last format, and started using ZoneAlarm. It works great and is extremely user-friendly. Whenever a program starts that tries to access the world outside your PC, it alerts you and asks if you want it to do so. It also alerts you of any incoming threats. But if you're running a router, you really don't need a software firewall. __________________ If I say a chicken can pull a boxcar, hitch it up.

05-05-2004, 06:02 PM	#3 (permalink)
Speed_Gibson Who knows what evil lurks in the hearts of men? Location: right here of course	the free version of Kerio 4.x; the main thing that the $40 gets you is the web-ad filtering. They give you a 30 day trial of that and I wanted to pay as soon as it expired but financial concerns have stopped me so far. __________________ Started talking to yourself I see. Yes, it's the only way I can be certain of an intelligent conversation. Black Adder

05-05-2004, 06:04 PM	#4 (permalink)
sailor beauty in the breakdown Location: Chapel Hill, NC	I am using Sygate. Yes, most routers include firewalls in them. The issue is that most are turned off by default--you are going to go in and tell it exactly what to block. Its default is all open. __________________ "Good people do not need laws to tell them to act responsibly, while bad people will find a way around the laws." --Plato

05-05-2004, 06:55 PM	#6 (permalink)
Hrothgar He's My Girl Location: The Champagne Douche	I'm paranoid as well. I have a router and recently installed Zonealarm. So far I'm very happy. __________________ The fortunes of war favored Hrothgar.

05-05-2004, 06:34 PM	#5 (permalink)
heyal256 Not so great lurker Location: NY	Personally, when it comes to computer security, I try to err on the side of paranoia. So that means taht not only do I have a router but I am also running a software firewall (zonealarm). I like zonealarm because if I get infected by any viruses, once my rules are setup, it will tell me if the program has changed since it last accessed the internet, and also tell me if something new (that I might not be aware is running) is trying to access the internet. Besides, the software firewall may provide you with some extra time to patch/clean your system when new viruses/exploits come out.

05-05-2004, 09:04 PM	#7 (permalink)
o14real Insane	I use Sygate Personal Firewall Pro it works great and i've had no problems with it. I've tried Norton, ZoneAlarm, McAfee and a few other and I like Sygates one the best.

05-05-2004, 11:22 PM	#8 (permalink)
Dragonlich 42, baby! Location: The Netherlands	Sygate was also recently tested as being the best "normal" firewall available (by a Dutch PC mag). It stopped most attacks thrown at it, while the rest didn't do so well at all. That included Zonealarm, which I was using before Sygate.

05-06-2004, 05:10 AM	#10 (permalink)
Dragonlich 42, baby! Location: The Netherlands	As I see it, my router is my incoming firewall, and Sygate is my outgoing firewall. Anything that tries to go from my computer to the internet gets inspected - that should keep spyware/virii/trojan horses quiet.

05-06-2004, 06:09 AM	#13 (permalink)
theburner Canadian Beer Ambassador Location: Cumming, GA	Zonealarm Free Version.. Works for me, and Leo from Tech TV likes it also! __________________ Take Off Eh!

05-06-2004, 11:45 AM	#15 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	Well, I decided to go with Zone Alarm. Thanks again.

05-06-2004, 01:44 PM	#16 (permalink)
hrdwareguy "Officer, I was in fear for my life" Location: Oklahoma City	A day late and a dollar short, but since you are running XP you could have just turned on the WinXP Personal Firewall. __________________ Gun Control is hitting what you aim at Aim for the TFP, Donate Today

05-06-2004, 05:47 PM	#17 (permalink)
Slavakion Mjollnir Incarnate Location: Lost in thought	Yeah, I guess. But it seems that something that easy can't be as effective as a third party solution. But I could be extremely wrong. Oh well.

05-06-2004, 08:05 PM	#18 (permalink)
Pragma I am Winter Born Location: Alexandria, VA	XP SP1's built in firewall is a bit lacking - but everything I've seen and read about SP2's firewall is that it should rival ZoneAlarm/etc. If you want to try it out, either download Release Candidate 1 of SP2 from Microsoft's website, or wait until summer. __________________ Eat antimatter, Posleen-boy!