Routers

My computer currently runs through a wireless linksys router. I’ve heard that routers provide protection against accessing my PC remotely (such as the msblaster worm). Is it necessary to also install ZoneAlarm, or is the router enough?

Never mind msblaster, you need a firewall.

Yes, everybody (though perhaps not if you’ve only got a dial-up modem) needs a firewall.

All the linksys router boxes I know of are also firewalls. XWalrus2 which linksys box do you have?

It’s the wireless access point, model BEF11S4.

Beware! NAT is not a firewall.

BEF11S4

I have a non-wireless linksys router. Before that, I used zonealarm and got pretty much constantly bombarded with internet noise and the occasional bad guy. After I got the router, zonealarm stopped getting these hits, completely. I don’t have zonealarm running on any of my computers (even one that’s in the DMZ for gaming reasons), and I have never had a problem.

…and to answer your question :slight_smile:
No you don’t need a software firewall because you allready have a better hardware firewall. Just make sure you change the password on your router.

I disagree. Everybody needs a firewall.

I’m on dial-up, and thought my university’s built-in protection would protect me, so stupidly ignored my home (dial-up) computer’s security, while keeping my work computers & laptop up to date w/all anti-virus, firewall, and windows updates.

Guess which worm I was infected with yesterday?

Guess how quickly I patched my computer and DLed ZoneAlarm? PDQ, that’s how quick.

And to “Me too” a little, your router provides hardware firewall protection, which is better than software, as long as everything is up-to-date and configured correctly. But there is no reason not to add a software firewall anyway. You might not ‘need’ one, but…

No, NAT is technically not a firewall, but the linksys and netgear (and probably most other home router/switches) show up as all ports stealthed on the public side. A port will only pass traffic if it was requested from the inside, otherwise no ports will respond. That’s a GOOD thing.

This also makes a very good case for a software firewall like zonealarm, as it will now tell you if something on your computer is attempting to access the internet, which the linksys/netgear would ALLOW by default.

Unless you had specific ports on the linksys forwarded to a host (pc) on your inside network, which is kind of advanced and not set like that by default, you’ll avoid any crap like the recent RPC overflow exploit.

In other words, use the linksys to protect from random (or targeted) outside activity coming in, and use zonealarm to prevent malicious spyware, crapware etc… from accessing the internet from the inside.

Also don’t forget to patch early and often.