Broadband and security question

Broadband and security question

Secure Home | Search | About
 Microsoft Antivirus Discussions    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Broadband and security question Dudley Henriques 09-23-2006
Posted by Dan on September 25, 2006, 9:35 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
cquirke (MVP Windows shell/user) wrote:
>> Dudley Henriques wrote:
>
>>> I've always used a simple dialup for my on line work and have not had any
>>> virus issues at all using the EZAntiVirus from CA that I have installed.
>>> Along with this, I use the XP in-house firewall. This combo has worked
>
>>> My situation is unique as I need my system as free of 3rd party software as
>>> possible for the testing I do for developers producing add on software for
>>> the Microsoft Flight Simulator program.
>
> Hmm... does this mean that use in the real world, where folks do
> indeed have all sorts of 3rd-party sware, isn't tested? ;-)
>
>>> This being said, I have just signed up with RCN for their broadband cable.
>>> This of course will change my on line scenario, as the port will now be open
>>> all the time the system is on.
>
> We don't have cable here, but we do have ADSL - and there I'd go for a
> combination Ethernet NAT router and ADSL "modem", so that the PCs are
> hidden behind the router's NAT. Try to do the same thing with cable,
> i.e. don't allow anything to assign a globally-unique IP address to
> your PC (rather than to a router that NATs it down to private IP).
>
>>> What I need to know is this; RCN offers free Mcafee software
>
> AVOID!!
>
> Usually, when a bank, ISP etc. offers "free McAfee", it's a ghastly
> "MyCIO" thing that gives you no control over it at all - there's
> almost no UI at all, so you can't see what it's doing.
>
> Run away screaming... use your existing av and XP firewall instead.
>
>>> my experience with Mcafee is that it is invasive to the registry
>>> and slows my system, which is not the best thing when you need
>>> every once of performance for testing.
>
> Hmm. To test whether a game is fast enough, you should test on the
> minimum-spec PC it's to be sold to - not an optimised best-case.
>
> Earlier testing that looks for bugs etc. is easier on a clean system
> with duhfault settings, but passing that doesn't make the sware fit
> for sale; interactions with underfootware need to be tested too.
>
>>> Will my present combination of AV and using the XP firewall be sufficient to
>>> protect the system with the new broadband in operation or will I need to
>>> make changes in the way I protect the computer?
>
>> You need a multi-layered approach to security on your PC(s). The router
>> suggestion is a good start.
>
> Agreed.
>
>> I would also add Zone Alarm Professional to have protection at
>> both the hardware level and secondarily at the software level.
>
> That breaks the OP's need to keep the system clean :-/
>
>
>
>> ------------ ----- --- -- - - - -
> Drugs are usually safe. Inject? (Y/n)
>> ------------ ----- --- -- - - - -

So Chris, I guess you really do not like Zone Alarm Professional and is
it because it is too bloated or what is the reason? Thanks in advance
for your replies.

Posted by cquirke (MVP Windows shell/use on September 26, 2006, 11:07 am
If you were  Registered and logged in, you could reply and use other advanced thread options

>So Chris, I guess you really do not like Zone Alarm Professional and is
>it because it is too bloated or what is the reason? Thanks in advance
>for your replies.

I was thinking that it's exactly the kind of pervasive add-on you're
trying to avoid. I've used/troubleshot the free ZA since it started
out as the only free firewall ("what's a firewall?") in the early
Win9x days, and with every new version of Windows, came hassles and
the search for "really, *this* version works" fixes.

Problems included blockage of LAN file and print sharing, tangles with
System Restore, constant writes to the file system that would cause
Scandisk and Defrag to continuously restart, bunfights with resident
av (especially CA's eTrust) and side-effects of its attachment
awareness. In the end, I just thought "I don't need the hassle".

When I do use a 3rd-party firewall, as is mandatory for Win2000, I've
been using Kerio. I've heard good things about Outpost, but I haven't
used it. Personally, I'd rather use a router to hide the systems from
direct access and use XP SP2's firewall, than hope for better
protection from a third-party firewall (esp. if no router protection)



>------------ ----- --- -- - - - -
Drugs are usually safe. Inject? (Y/n)
>------------ ----- --- -- - - - -

Posted by Dan on September 27, 2006, 4:44 am
If you were  Registered and logged in, you could reply and use other advanced thread options
cquirke (MVP Windows shell/user) wrote:
>
>> So Chris, I guess you really do not like Zone Alarm Professional and is
>> it because it is too bloated or what is the reason? Thanks in advance
>> for your replies.
>
> I was thinking that it's exactly the kind of pervasive add-on you're
> trying to avoid. I've used/troubleshot the free ZA since it started
> out as the only free firewall ("what's a firewall?") in the early
> Win9x days, and with every new version of Windows, came hassles and
> the search for "really, *this* version works" fixes.
>
> Problems included blockage of LAN file and print sharing, tangles with
> System Restore, constant writes to the file system that would cause
> Scandisk and Defrag to continuously restart, bunfights with resident
> av (especially CA's eTrust) and side-effects of its attachment
> awareness. In the end, I just thought "I don't need the hassle".
>
> When I do use a 3rd-party firewall, as is mandatory for Win2000, I've
> been using Kerio. I've heard good things about Outpost, but I haven't
> used it. Personally, I'd rather use a router to hide the systems from
> direct access and use XP SP2's firewall, than hope for better
> protection from a third-party firewall (esp. if no router protection)
>
>
>
>> ------------ ----- --- -- - - - -
> Drugs are usually safe. Inject? (Y/n)
>> ------------ ----- --- -- - - - -

So do you think the software firewall is a waste if a user is behind a
NAT router?

Posted by Leythos on September 27, 2006, 7:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
says...
> cquirke (MVP Windows shell/user) wrote:
> >
> >> So Chris, I guess you really do not like Zone Alarm Professional and is
> >> it because it is too bloated or what is the reason? Thanks in advance
> >> for your replies.
> >
> > I was thinking that it's exactly the kind of pervasive add-on you're
> > trying to avoid. I've used/troubleshot the free ZA since it started
> > out as the only free firewall ("what's a firewall?") in the early
> > Win9x days, and with every new version of Windows, came hassles and
> > the search for "really, *this* version works" fixes.
> >
> > Problems included blockage of LAN file and print sharing, tangles with
> > System Restore, constant writes to the file system that would cause
> > Scandisk and Defrag to continuously restart, bunfights with resident
> > av (especially CA's eTrust) and side-effects of its attachment
> > awareness. In the end, I just thought "I don't need the hassle".
> >
> > When I do use a 3rd-party firewall, as is mandatory for Win2000, I've
> > been using Kerio. I've heard good things about Outpost, but I haven't
> > used it. Personally, I'd rather use a router to hide the systems from
> > direct access and use XP SP2's firewall, than hope for better
> > protection from a third-party firewall (esp. if no router protection)
> >
>
> So do you think the software firewall is a waste if a user is behind a
> NAT router?

If you are reasonably sure you know what you are doing, a NAT router
will be all that you need in most home user cases. They block inbound
traffic, so, nothing reaches your computer unless you invite it to reach
your computer - that means that as long as you don't download/install
some malware, external users can't directly reach your computer.

If you are the type that visits questionable sites, or doesn't patch
their computer, or downloads files for the fun of it, then nothing you
install or hardware will protect you.

All installable personal firewall solutions can be compromised on a
Windows box when you run as a local administrator, some PFW's provide
reporting and real-time traffic displays, but you should never count on
a PFW to fully protect you, you really need to monitor the logs in that
NAT Router to be sure what your network is doing.

--

spam999free@rrohio.com
remove 999 in order to email me

Posted by Dan on September 28, 2006, 2:06 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Leythos wrote:
> says...
>> cquirke (MVP Windows shell/user) wrote:
>>>
>>>> So Chris, I guess you really do not like Zone Alarm Professional and is
>>>> it because it is too bloated or what is the reason? Thanks in advance
>>>> for your replies.
>>> I was thinking that it's exactly the kind of pervasive add-on you're
>>> trying to avoid. I've used/troubleshot the free ZA since it started
>>> out as the only free firewall ("what's a firewall?") in the early
>>> Win9x days, and with every new version of Windows, came hassles and
>>> the search for "really, *this* version works" fixes.
>>>
>>> Problems included blockage of LAN file and print sharing, tangles with
>>> System Restore, constant writes to the file system that would cause
>>> Scandisk and Defrag to continuously restart, bunfights with resident
>>> av (especially CA's eTrust) and side-effects of its attachment
>>> awareness. In the end, I just thought "I don't need the hassle".
>>>
>>> When I do use a 3rd-party firewall, as is mandatory for Win2000, I've
>>> been using Kerio. I've heard good things about Outpost, but I haven't
>>> used it. Personally, I'd rather use a router to hide the systems from
>>> direct access and use XP SP2's firewall, than hope for better
>>> protection from a third-party firewall (esp. if no router protection)
>>>
>> So do you think the software firewall is a waste if a user is behind a
>> NAT router?
>
> If you are reasonably sure you know what you are doing, a NAT router
> will be all that you need in most home user cases. They block inbound
> traffic, so, nothing reaches your computer unless you invite it to reach
> your computer - that means that as long as you don't download/install
> some malware, external users can't directly reach your computer.
>
> If you are the type that visits questionable sites, or doesn't patch
> their computer, or downloads files for the fun of it, then nothing you
> install or hardware will protect you.
>
> All installable personal firewall solutions can be compromised on a
> Windows box when you run as a local administrator, some PFW's provide
> reporting and real-time traffic displays, but you should never count on
> a PFW to fully protect you, you really need to monitor the logs in that
> NAT Router to be sure what your network is doing.
>

Thanks Leythos for your reply. I will continue to use the NAT router
and monitor it from time to time. I will use Zone Alarm Professional as
well. I look forward to testing the Windows Vista Firewall soon by
connecting directly into the modem and see what hits the Vista operating
system receives and the blocking ability with just the Vista software
firewall and no hardware protection. I did this for a few months with
XP Professional Service Pack 2 and the majority of hits came from China
and they also had the strongest hack attempts. <grin>

Similar ThreadsPosted
XP SP2 Security Center Question July 19, 2005, 3:47 pm
Security Alert Question August 16, 2005, 12:01 pm
Flash Player security update is available; Security Bulletins released by Adobe July 10, 2007, 7:29 pm
AVG Free question July 27, 2005, 4:58 pm
Multi AV Question October 28, 2005, 12:36 am
Re: WMF Exploit question January 5, 2006, 3:31 pm
Re: WMF Exploit question January 5, 2006, 4:33 pm
just a quick question January 7, 2006, 1:50 pm
Question about AVG or AVAST February 16, 2006, 5:10 am
Mr. Pandaman, a question for you ? March 4, 2006, 5:01 pm

The site map in XML format XML site map

Contact Us | Privacy Policy