Networking security

For general computer discussion & help, come here

Moderators: Bakhtosh, EvilHomer3k

Post Reply
User avatar
Lee
Posts: 12034
Joined: Sun Oct 17, 2004 10:59 am

Networking security

Post by Lee »

This is something I never really worried about, but comments I have read have made me question it. I run a Linksys (wired) router to 3 computers. The 2 PC's have always had virus checkers, Adware, and Zonealarm running on them.

A thread on CG got me wondering though. A couple of people mentioned that the hardware firewall in the router is enough, and you don't need Zonealarm. Are hardware firewalls that good? If they are why does Zonealarm track so many probes into my computer?

Also I was reading some Mac stuff and there were comments made that said you don't need Adware or virus checkers for Macs. This surely can't be true. I know they are more secure than a PC, but I know they can still be hit by virus. is adware less common on Macs?

So my real question is, what do I need to do have a secure wired network? What do the experts here at OO do?

Thanks...
For motivation and so Jeff V can make me look bad:
2010 Totals: Biking: 65 miles Running: 393 miles
2009 Finals: Biking: 93 miles Running: 158 miles (I know it sucked, but I had a hernia most of the year)
User avatar
Rip
Posts: 26952
Joined: Tue Oct 12, 2004 9:34 pm
Location: Cajun Country!
Contact:

Re: Networking security

Post by Rip »

Lee wrote:This is something I never really worried about, but comments I have read have made me question it. I run a Linksys (wired) router to 3 computers. The 2 PC's have always had virus checkers, Adware, and Zonealarm running on them.

A thread on CG got me wondering though. A couple of people mentioned that the hardware firewall in the router is enough, and you don't need Zonealarm. Are hardware firewalls that good? If they are why does Zonealarm track so many probes into my computer?

Also I was reading some Mac stuff and there were comments made that said you don't need Adware or virus checkers for Macs. This surely can't be true. I know they are more secure than a PC, but I know they can still be hit by virus. is adware less common on Macs?

So my real question is, what do I need to do have a secure wired network? What do the experts here at OO do?

Thanks...
The hardware firewall on the linky is pretty decent for home security. Of course more levels of security always translates into somewhat better security. Also most people set up their gateway to allow all outbound traffic whereas zonealarm can be nice for monitoring outbounds.

I would suggest scanning yourself in different configurations to see how well you are being protected. I always send my residential customers herehttp://www.grc.com to run Shields Up!

On the Mac question, there are far fewer virus and spyware problems for Mac users to worry about. That doesn't mean there aren't any. So myself I would still run the appropriate applications to protect myself.
“A simple democracy is the devil’s own government.”
— Benjamin Rush
--
User avatar
Lee
Posts: 12034
Joined: Sun Oct 17, 2004 10:59 am

Post by Lee »

Wow great link, thanks Rip. My network seems to be in pretty good shape according to Shields Up. I got identical results with Zonealarm on and off, which I found interesting. The Linksys firwall must be pretty good.

Thanks for your help.
For motivation and so Jeff V can make me look bad:
2010 Totals: Biking: 65 miles Running: 393 miles
2009 Finals: Biking: 93 miles Running: 158 miles (I know it sucked, but I had a hernia most of the year)
User avatar
Rip
Posts: 26952
Joined: Tue Oct 12, 2004 9:34 pm
Location: Cajun Country!
Contact:

Post by Rip »

Lee wrote:Wow great link, thanks Rip. My network seems to be in pretty good shape according to Shields Up. I got identical results with Zonealarm on and off, which I found interesting. The Linksys firwall must be pretty good.

Thanks for your help.
When you block everything most decent firewalls are ok. It's when you have to let certain traffic through that it gets harder. A majority of the people that get hacked fail to use a gateway and don't keep their system up to date. If you do those things you should be in pretty decent shape.
“A simple democracy is the devil’s own government.”
— Benjamin Rush
--
User avatar
jztemple
Posts: 218
Joined: Tue Jan 18, 2005 1:31 pm
Location: Florida, USA

Post by jztemple »

Hi guys.

I found this thread when doing a search here about Zonealarm. I've had a kind of weird problem some might find interesting.

I used to have a Netgear 614 wired router. Worked fine with no problems, and I run Zonealarm on both computers that are hooked to the router.

Recently the old router power supply died and I was going to order one but I found a Netgear WGR614 wireless router on sale for about what it would cost for ordering the power supply plus shipping. Since it has the same functions as the wired router, plus 811g wireless I couldn't go wrong, so I got it.

I set up the unit per the manual, and since I don't have any wireless need yet I turned off that function. Everything looked like it was working fine...

A few days ago I noticed that while during the day I didn't seem to have any problems getting to the net, at night I would have some problems. Sometimes I couldn't get any pages to load in the browser, and my email wouldn't connect to the server. Since the only difference was the time of day, I figured it was my ISP getting hammered.

Last night I had the same problem and decided on a whim to turn off Zonealarm. Viola, no more problems, everything worked great. I checked the Netgear support knowledge base and it says that sometimes software firewalls like Zonealarm can be in conflict with the router and to turn off Zonealarm since the router firewall provides the protection I need.

It just seemed odd that most of the time there was no problem, then some of the time there was.

I guess I need to go to grc.com and test my router firewall as someone suggested above, but I do have a question. Since I'm also running Norton AV, between that and the router firewall am I protected enough to quit using Zonealarm?

BTW, I've been using Zonealarm (not Pro) for years and it's always seemed fine to me, never really noticed any slowdown. I think the Norton AV 2005 causes me more timing issues, but then I might be just a bit paranoid, too :wink:
User avatar
Smoove_B
Posts: 57232
Joined: Wed Oct 13, 2004 12:58 am
Location: Kaer Morhen

Post by Smoove_B »

As Runningman keeps pointing out to me, the firewall only works until someone behind it opens an e-mail attachment that contains a trojan that tunnels out.

So while the firewall is fantastic, that doesn't mean the people working behind it can run around like little digital maniacs and throw all caution to the wind.
Maybe next year, maybe no go
User avatar
jztemple
Posts: 218
Joined: Tue Jan 18, 2005 1:31 pm
Location: Florida, USA

Post by jztemple »

Smoove_B wrote:As Runningman keeps pointing out to me, the firewall only works until someone behind it opens an e-mail attachment that contains a trojan that tunnels out.

So while the firewall is fantastic, that doesn't mean the people working behind it can run around like little digital maniacs and throw all caution to the wind.
I set myself a policy long ago of never giving out my "true" email to any users who might post it to the web and so far (knock wood) my email has been spam-free. And of course I have Norton AV to check my email, and run Spybot and Adaware and Crap Cleaner to keep everything neat and tidy. That's why I'm a bit disappointed with this apparent Zonealarm conflict, since it's been pretty much problem free for me. I play Joint Ops online quite a bit and I'm running both Norton AV and Zonealarm while playing, and of course it's going up through the router firewall as well. Doesn't seem to hurt my ping at all, which is nice.

I'll probably leave Zonealarm active unless I see the problem occur and then just turn it off for the duration of that event only.
User avatar
Rip
Posts: 26952
Joined: Tue Oct 12, 2004 9:34 pm
Location: Cajun Country!
Contact:

Post by Rip »

Make sure you upgrade to the latest firmware on any router/wireless devices. These things are frequently shipped with bugs that cause the kind of behavior you speak of.
User avatar
Octavious
Posts: 20055
Joined: Fri Oct 15, 2004 2:50 pm

Post by Octavious »

Personally I think if you have a router setup properly having zone alarm is really pointless. Then again I absoulty hate that program.
Post Reply