Originally posted by: gizbug
Even with a software firewall, if a person wants into your system, they'll get in. IMO, Software firewall = a complete waste.
How? Unless you're talking about a targeted attack directed at a particular computer
by a particular person who happens to have first-hand knowledge of the targeted computer's security gap, I don't see how a machine could be breached that easily. Unless you're talking about a Trojan in an e-mail that a dumb user opens up or something.
AFAIK, most credible firewalls reject all attempts from the outside to allow communication (if they're configured properly), including foiling ping tests and port scans by "cloaking" the computer's non-essential ports and making it "invisible" on the Web (or so they claim). And there's no configuring to the Windows firewall -- it's just on and does its job, right? So what am I missing here? If anyone could get into anyone's computer that just had a software firewall, wouldn't millions of computers all over the globe be getting breached every day?
While we're on the subject of firewalls, my own experience has been that the Windows firewall in XP seems to keep the bad guys out without all the annoyances that come with third party firewalls like Zone Alarm or Norton (among others). For the average Joe or Joan, ZA and Norton, etc., are difficult to manage because of all the permission boxes that pop up everytime a program wants/needs to access the Internet. This is unnecessary unless malware has gotten into the user's computer and it wants to "phone home," and if you keep it out in the first place with an effective A-V and/or a Limited Account or SRP, you don't
need outgoing program monitoring. It just drives people crazy unless they're sophisticated users (and most people aren't).