Firewalls - are they really needed?

aliEnRIK

For all those that believe their Nat firewall prevents ALL incoming connections, download PEER GUARDIAN
http://www.snapfiles.com/get/PeerGuardian.html
You dont even need it to block any, just watch the number of ips 'scanning' your ports over the course of the day

[Deleted User]

aliEnRIK wrote: »

For all those that believe their Nat firewall prevents ALL incoming connections, download PEER GUARDIAN
http://www.snapfiles.com/get/PeerGuardian.html
You dont even need it to block any, just watch the number of ips 'scanning' your ports over the course of the day

So your point is... Turn on an inbound software firewall?

aliEnRIK

Deleted_User wrote: »

So your point is... Turn on an inbound software firewall?

No

Inbound firewalls dont stop them either (least to my knowledge)
They scan your ports. they dont actually try to CONNECT (Which is what a firewall stops)
(Zonealarm does I believe though)

[Deleted User]

aliEnRIK wrote: »

No

Inbound firewalls dont stop them either (least to my knowledge)
They scan your ports. they dont actually try to CONNECT (Which is what a firewall stops)
(Zonealarm does I believe though)

Oh I agree you need an inbound firewall. For me both hardware and software. I've said that from the start...

aliEnRIK

http://netsecurity.about.com/cs/hackertools/a/aa121303.htm


Actually. I believe Comodo, Zonealarm and PCtools do stop most port scans. (Though theres ways around them)

aliEnRIK

http://www.auditmypc.com/freescan/readingroom/port_scanning.asp
read this one. Basically its down to the hackers trying to get past the firewalls using various techniques. Id hazard a guess the inbuilt MICROSOFT one is the main one to be 'hit' though.......

mulldoonuk

Okay......going to install PC Tools firewall tonight!

aliEnRIK

Deleted_User wrote: »

Oh I agree you need an inbound firewall. For me both hardware and software. I've said that from the start...

What IM trying to say is because the hackers KNOW the vast majorty of people will use the inbuilt one (be it Xp or Vista), then its THE most likely to be 'attacked'
Ergo, its safer to use a decnt 3rd part one purely as its MUCH less likely to be vulnerable to the hackers (And by default, you would then have an OUTBOUND firewall too )

mulldoonuk

aliEnRIK wrote: »

http://www.auditmypc.com/freescan/readingroom/port_scanning.asp
read this one. Basically its down to the hackers trying to get past the firewalls using various techniques. Id hazard a guess the inbuilt MICROSOFT one is the main one to be 'hit' though.......

Well just tried this and got.......

"We completed the audit and did not find any open ports.
This is ideal for the average visitor."

(using Vista's firewall)

aliEnRIK

mulldoonuk wrote: »

Well just tried this and got.......

"We completed the audit and did not find any open ports.
This is ideal for the average visitor."

(using Vista's firewall)

yes. Thats a very good test site for a 'basic' port scan. Hackers dont use 'basic' port scans (At least a decnt hacker (probably NOT a good word to define a hacker, but you know what I mean ;p)