Firewalls - are they really needed?

[Deleted User]

peter_the_piper wrote: »

I've noticed that this discussion is generally between a few very experienced posters who are generally very knowledgeable regarding the workings of the net and computers. Is it really being suggested that for the millions of non techie users a firewall is not necessary?

I'd say it's even less likely to be required if you're not 100% sure every time you click allow and you're sure you know exactly what you're allowing and what's currently already got the go-ahead. If not then it seems a little pointless in having a gate locked very tight with holes in it for people to still get through...

If you were in a similar situation to me e.g. sitting behind a router with an inbound hardware firewall (google your router for the pdf manual then find the word firewall to check this) and Windows XP SP3 Firewall turned on then I still don't believe an outbound firewall, what it sounds like you've got at the moment, is required.

I'd also say the standard things of not clicking on links in emails and not opening attachments to emails if you don't know the sender. One example of being a savy computer user. Another is common sense.

I'd also still advocate installing and running anti-virus scans (Avira AntiVir for me), anti-spyware scans (SuperAntiSpyware) and anti-malware scans (Malwarebytes). Turn Windows Update on and ensure your PC is fully patched. Finally use Firefox as your primary browser (Adblock Plus is the only add-on I have).

BillScarab

I must admit I've always run a software firewall, even though I'm now behind a router with a built in hardware firewall. Recently though I have been considering removing it since my wife and children tend to just click allow if it pops up an alert so it seems a bit pointless.

[Deleted User]

BillScarab wrote: »

I must admit I've always run a software firewall, even though I'm now behind a router with a built in hardware firewall. Recently though I have been considering removing it since my wife and children tend to just click allow if it pops up an alert so it seems a bit pointless.

Exactly. Take the time to prevent it from ever getting onto your PC rather than catching it, or not if you're clicking allow all the time , after it's on there.

aliEnRIK

Deleted_User wrote: »

Exactly. Take the time to prevent it from ever getting onto your PC rather than catching it, or not if you're clicking allow all the time , after it's on there.

Now its changed from ~ are firewalls usefull to ~ do the users have any brains

For the record, I NEED an outbound
And if something nasty DID try to send info outwards, most 'decent' firewalls will say something like ~
jsf78jetj is trying to connect to the net from your machine. this is an UNKNOWN program and ADVISE CAUTION. Do you want to allow ~ YES or NO
Let me think.......what would I press........

RobertoMoir

You sound like you've been reading one of those computer security scare stories.

ukbill69 wrote: »

NO software firewall, your mad. The good thing about a firewall you can restrict what software you let out.

Except for when you can't. What about software that subverts the system as I've already outlined, or that which embeds into legitimate traffic streams?

ukbill69 wrote: »

Now what about open ports on your system????, if any are open then you may be in trouble and let people to view your screen,

Uh. No. You can't "view my screen" if I leave a port "open", unless it's the one for my remote desktop system and you have the correct password.

ukbill69 wrote: »

if on windows xp then C drive is a shared drive.

Which needs admin rights to access, not to mention a lot of other stuff to line up just right in a manner that is pretty unlikely over an internet connection.

Firewalls can be valuable, but only when used properly to target the things they are good at. Even software firewalls can play a part in security despite my serious misgivings about them.

However... Firewalls are not a panacea. They do not magically make your computer secure. What you're talking here is effectively "cargo cult security".

[Deleted User]

aliEnRIK wrote: »

Now its changed from ~ are firewalls usefull to ~ do the users have any brains

Bit harsh! This is certainly an aspect which needs to be considered however.

RobertoMoir

aliEnRIK wrote: »

define ~
'ineffective'

They're not totally useless, but they're certainly far less effective than some people seem to think. Software firewalls are, in theory, most useful for people who are inexperienced with security issues, and they do have a role to play for these people. However, these are the people most likely to just click on "unblock" when their firewall pops up because they're in a rush to see the pretty dancing pig screensaver featuring some half naked celebrity that they've just been promised if they download whatever.

[Deleted User]

RobertoMoir wrote: »

because they're in a rush to see the pretty dancing pig screensaver featuring some half naked celebrity that they've just been promised if they download whatever.

You've seen that too! I love that little Pig! :rotfl:

Savvy_Mommy

A firewall is hardware or software that limits access to a computer from an outside source. If your computer will ever be connected to the Internet, a firewall is an essential tool needed to prevent malware and hackers from accessing or damaging your computer. Without a firewall, your computer can be compromised within SECONDS after connecting to the Internet. If you're a dialup user, it might take a little longer, but it will happen. The reason for this is the automated hacking drones that are constantly scanning Internet-connected computers, looking for any vulnerability.

The real question is "Do I need a software-based firewall or a hardware-based firewall?" If you have a highspeed Internet connection such as DSL or cable, and you have a router between your DSL/cable modem and your computer, most likely you already have a hardware-based firewall, and that's all you need. If your router has NAT (network address translation), or your modem has a built-in router with NAT, you have a hardware firewall which effectively makes your PC invisible to the attacking hordes. If you're not sure if you have a NAT router, do a web search for your router's make and model and you should be able to find the manufacturer's specs or a review that answers the question.

If you have a highspeed modem that is connected directly to your computer (no router in between), chances are you do NOT have a hardware firewall in place. And if you have a dialup connection, you definitely don't have a hardware firewall. So in the absence of a hardware firewall, you absolutely need a software-based firewall.

There are many free firewalls on offer and I personally use AVG. It's free reliable and surprisingly thorough!

Hope this helps!

[Deleted User]

Savvy_Mommy wrote: »

A firewall is hardware or software that limits access to a computer from an outside source.

Incorrect. I could have a hardware firewall, say my router, with no inbound protection. We need to consider and note the type of protection offered e.g. inbound (Windows XP firewall for example) or inbound and outbound (one of many 3rd party firewalls available)

Savvy_Mommy wrote: »

If your computer will ever be connected to the Internet, a firewall is an essential tool needed to prevent malware and hackers from accessing or damaging your computer.

Agreed, an inbound firewall isn't optional in my view. A router with a hardware firewall is great. Windows XP firewall is also great if you share your router with other computers you're not sure on. N.B. both of these are inbound firewalls.

Savvy_Mommy wrote: »

The real question is "Do I need a software-based firewall or a hardware-based firewall?" If you have a highspeed Internet connection such as DSL or cable, and you have a router between your DSL/cable modem and your computer, most likely you already have a hardware-based firewall, and that's all you need.

What if you're in a hotel using their wireless Internet access? They've got the hardware firewall but what about all the computers on that network? I'd want an inbound software firewall on my laptop as well...

Savvy_Mommy wrote: »

If your router has NAT (network address translation), or your modem has a built-in router with NAT, you have a hardware firewall which effectively makes your PC invisible to the attacking hordes.

Agreed.

Savvy_Mommy wrote: »

If you have a highspeed modem that is connected directly to your computer (no router in between), chances are you do NOT have a hardware firewall in place. And if you have a dialup connection, you definitely don't have a hardware firewall. So in the absence of a hardware firewall, you absolutely need a software-based firewall.

Agreed.