firewall newbie questions

[Bglad]

I am getting cable in 2 weeks (if I actually get my appointment) and am trying to figure out how to secure my machine. I have 2 machines already networked together. I downloaded the trial of norton security just to test how this all worked. It blocks a lot of stuff I don't want it to, games, video chat etc. and I can't figure out how to customize it. Is that how all of these work? I know this isn't the one that everyone here suggests, I just wanted to try a free experiment first. Can someone help me out with some more detail? I've read Tim Higgins and have gotten file sharing unbound from tcp/ip and suppose I will do the same to the nic that the cable comes in on. But how do I get all the stuff I want to come through the firewall and just keep out the danger?

 

[BCYL]

go to Shieldup at www.grc.com, and test Norton Internet Security 2000... My friend installed that firewall, but still failed the tests at grc.com... For beginner get ZoneAlarm (www.zonelabs.com), it is one of the best software firewalls out there, and it's free. But for the best security, software firewalls will never be enough... You can think about getting a router with hardware firewall or build a linux box out of an old computer for maximum security...

 

[Menelaos]

About NIS2000: It is a good firewall, but you have to configure it way to much to get it right. You practicly have to go over all the rules manually and this EVERY time you reïnstall!! But you do get an antivirus, webfilter and personal firewall all @ once.

Go with BCYL's ID and save yourself some time (especially with that linux firewall ).

Menel.

 

[Bglad]

So are you saying that other firewall software is easier to configure? I really don't want to build a Linux box. That would be opening another can of worms that I don't know about. I'd be more likely to buy a hardware firewall. But I'd really like to get away with it as cheaply as possible.

 

[IsOs]

Let me start by telling you a fact of life. ALL firewall, software & hardware have known exploits that if you did not set it up correctly and know how to prevent them from using the exploits, someone can penetrate your defense.

If money is a BIG concern, ZoneAlarm is FREE, and BlackICE is $40. I believed Norton cost more.

 

[Bglad]

Norton was more or less a free first try experiment. My problem with it is not the money but the amount of information it gives me. When it denies something I want, I can't figure out how to see what it is and disable that plug. Am I just not understanding how this works?

 

[Bglad]

One more question please. Now I've installed ZoneAlarm. Much easier to configure for each particular app than Norton. Since everything is backed up and I don't really have anything that personal on the machine, this should be enough for me.

Question is do I have to run it on the 2nd machine also? I ran shields up from the remote computer and it came up stealth but according to the ZoneAlarm website, I should be running it on both machines. Why???

Thanks for the help.

 

[BCYL]

One advantage of having ZoneAlarm run on both of your machine is to prevent spyware from phoning home. You can see ZoneAlarm allows you to control which application can access the Internet... it blocks internet access attempts from unknown application, which means it blocks those spyware from sending your computer's information back to it's maker (things like passwords)... Running ZoneAlarm on the main computer can prevent hackers from getting into both of your PCs, but cannot prevent spyware on the other PC from sending your information home.

 

[cisco]

I have an Rt311 router do I need zone alarm too. I've installed it on the always on computer and the gaming machine, but I want to uninstall it from the gamer because when I forget to turn off zone
I have to restart the game (a real pain in the neck)????

 

[Marine06]

DO NOT get norton internet security... its one of the worst products out there. THey just used @guard code added about 4-5 megs of crap and made the firewall worse. Zonealarm would be the best since it is free and easy to configure.

 

[BCYL]

cisco: you can uninstall ZoneAlarm from both your machines if you want, since your router will offer the level of security ZoneAlarm can ever offer. You are already very protected from hackers because of your router.

But if you are worry about spyware (maybe because you d/l a lot of programs), then leaving ZoneAlarm on will have it's advantages, since it can block those spywares from "phoning home."