Need suggestions for network security

[DragonFire]

The Story:

With any luck I will have DSL on the 21st. I have two computers connected using a crossover cable. I have spare nics and I have a linksys 4port switch.


The Question:

Can I hook both computers and dsl modem up to the switch, have my main pc setup for connection sharing as it is now and depend on a software firewall along with the hardware firewall thats built into the dsl modem to be enough? Or should I go out and but a dsl router? If I should just go with a router, which one should I get asuming Im getting in froma local store like BestBuy or CompUSA ?

Is there some other way that might be even better?

 

[OracleOfDelphi]

As far as I know, most DSL/Cable Modems do not have any firewall built into them.
That usually comes with a router. Which is independent of the Modem. You best bet is to get a router
and configure the network in the following manner (if your willing to spend money on the router):
1. Connect Modem to router
2. Connect PC's to router.

You do not really need the switch until you have more PC's than the router can handle.
If you buy a 1 port router then using the switch makes sense.

Without buying a router you would be best off going with the following configuration:
1. Put 2 nic cards into main connection machine.
2. Plug modem into one of the nics and connect the other cable to the switch or directly to ther other PC.

You would have to enable ICS on the main PC. The disadvantage to this connection is order for any other PC
to be connected to the internet the direct connect machine would have to be on.
The router method works best in just about all scenarios (if your willing to shell out money, up to $70)
The router is your first and best defense against all the evils on the internet, if you take the time to set
it up properly. Adding Software firewall to the mix does not hurt. In some cases a good way to go is the following:

1. Connect Modem to Software firewall PC.
2. 2 NICS in Firewall PC. Second NIC connects to Router.
3. All other PC's connect to Router.

Advantage(s): Only 1 PC needs to have firewall Software put on it.
Could use PC as make shift server.

Disadvantage(s): Cost
Lose an active PC.

This can be overkill, if your Router is configured properly that is usually the most that the average user needs.
That and sensible internet usage.

Suggestions on routers: 4 Port router with Wireless capability.
Also supprts the following abilities:

MAC Filtering
URL Filtering
SPI
Blocking Pings from the WAN
Port blocking
Base IP address change.
Static and Dynamic DCHP
Most routers under $100 these days support most if not all of these features.
Good luck.

 

[DragonFire]

Well I wont know for sure which modem Im getting intill ups gets it here but I think it will be a 2wire homeportal. I thought I had read somewhere that these had firewalls built in?

As for the router, I got my eye set on the D-Link DI-604 if it turns out that the dsl modem doesnt have a firewall built in.

 

[JackMDS]

May be this can Help.

Link to: DSL PPPOE and Cable/DSL Routers.

Link to: Basic Protection for Broadband Internet Installation.

Link to: What is the Best Firewall?

 

[DragonFire]

Well I wont know for sure which modem Im getting intill ups gets it here but I think it will be a 2wire homeportal. I thought I had read somewhere that these had firewalls built in?

As for the router, I got my eye set on the D-Link DI-604 if it turns out that the dsl modem doesnt have a firewall built in.

 

[JackMDS]

It is not the Firewall it is the NAT that you have to be concern about.

I would suggest that you should read the links in my post above + This.

It will take you 30min. But it will save hours.

Link to: AnandTech - FAQ. Basic Options for Internet Connection Sharing

Link to: AnandTech - FAQ. Hubs, routers, switches, DSL, LANs, WANs...?

Ignore the prices in the links above. The same or similar hardware can be found for 60%-90% less.

 

[Kwatt]

The modem that was sent to my parents(by the phone co.) for their dsl had nat and firewall.

I hooked a switch to the modem and 3 computers to the switch. Went the modem's web control panel entered the user name and password. Everything worked great!

Kwatt

P.S. This phone co. charges extra for more than 1 computer. So I removed the switch.
The modem has customized software. And the control panel can be accessed from the net.
When accessed shows the computers using it. I don't know if the telco can check how many computers are connected or not. YMMV