Is this setup necessary (router/firewall +)

Is this setup necessary (router/firewall +)

am 21.06.2007 00:43:29 von unknown

Post removed (X-No-Archive: yes)

Re: Is this setup necessary (router/firewall +)

am 21.06.2007 02:27:46 von Sebastian Gottschalk

Queen Mary wrote:

> I am using Win XP and have a wired router for just my computer, plus
> the firewall is set to ON within XP. I also got PC Firewall Plus for
> what I believe is added protection, but is all of this necessary?


short answer: no
long answer: yes, PC Firewall Plus is necessary in this setup to make the
computer insecure

> The reason I got the PC Firewall Plus was first, it was free.


Garbage from the trash can is free as well. Still I don't have any intend to...

> Secondly, it said it prohibits programs from within the computer to
> secretly connect to the Internet by first telling you which program is
> trying to do that and asking if it is OK or not?


So what? This only applies to legitimate programs, where is it superfluos.
Illegitimate programs simply click the OK button on your behalf, or hijack
already allowed applications.

> Is all of this necessary or is there something else you might
> recommend, something better?

What about sitting back and thinking about a real security concept?

Re: Is this setup necessary (router/firewall +)

am 21.06.2007 05:34:52 von unknown

Post removed (X-No-Archive: yes)

Re: Is this setup necessary (router/firewall +)

am 21.06.2007 13:46:24 von Ansgar -59cobalt- Wiechers

Queen Mary wrote:
>> What about sitting back and thinking about a real security concept?
>
> I am, that is why I posted to this NG.

For a security concept the first thing you need to do is identify your
assets (i.e. what do you want to protect). Next you need to identify
your risks (i.e. how could your assets be attacked/exploited). Once you
have identified your assets and risks you can start developing methods
and strategies to mitigate your risks.

cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich