Firewalls for XP

  • Thread starter Thread starter User66
  • Start date Start date
U

User66

What is the reason for not to use multiple firewalls for a user PC or a gateway PC ? Appreciate comments.
 
Possible problems with connections. You may or may not have problems. But,
they are not going to work in concert with each other. Chances are they
will fight each other.

Don't run more than one AntiVirus either.

<quote>
Running multiple software firewalls is unnecessary for typical home
computers. Using two firewalls on the same connection could cause issues
with connectivity to the Internet or other unexpected behavior. One
firewall, whether it's the Windows Firewall or a different software
firewall, can provide substantial protection for your computer.
<quote>
Get the basics on firewalls
http://safety.live.com/site/en-US/article/firewall_basics.htm

<quote>
Q. Should I use both Internet Connection Firewall and a software firewall
from a different company on my Windows XP computer?

A. No. Running multiple software firewalls is unnecessary for typical home
computers, home networking, and small business networking scenarios.
Using two firewalls on the same connection could cause issues with
connectivity to the Internet or other unexpected behavior. One firewall,
whether it is the Windows XP Internet Connection Firewall or different
software firewall, can provide substantial protection for your computer.
<quote>
Frequently Asked Questions About Internet Firewalls
http://www.microsoft.com/security/protect/firewall.asp

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Thank you for the reply. You gave me enough to read.
I may have some questions about the built in firewall in XP,
which is a one way firewall, where as the commercial
versions, such as Zone Alarm or Sygate both has in
and out controls. Is it worth to have a firewall with both
in/out controls?
 
yes

User66 said:
Thank you for the reply. You gave me enough to read.
I may have some questions about the built in firewall in XP,
which is a one way firewall, where as the commercial
versions, such as Zone Alarm or Sygate both has in
and out controls. Is it worth to have a firewall with both
in/out controls?
 
In short, yes. Generally, gamers and others use ports that may otherwise be
blocked by default. (Just one reason)
It may also help to prevent unneeded traffic to a router from users.
"Is it worth to have a firewall with both
in/out controls?"
 
User66 said:
Thank you for the reply. You gave me enough to read.
I may have some questions about the built in firewall in XP,
which is a one way firewall, where as the commercial
versions, such as Zone Alarm or Sygate both has in
and out controls. Is it worth to have a firewall with both
in/out controls?

I think so, yes.

WinXP's built-in firewall is usually adequate at stopping incoming
attacks, and hiding your ports from probes. What WinXP SP2's firewall
does not do, is protect you from any Trojans or spyware that you (or
someone else using your computer) might inadvertently download and
install. It doesn't monitor out-going traffic at all, other than to
check for IP-spoofing, much less block (or at even ask you about) the
bad or the questionable out-going signals. It assumes that any
application you have on your hard drive is there because you want it
there, and therefore has your "permission" to access the Internet.
Further, because the Windows Firewall is a "stateful" firewall, it will
also assume that any incoming traffic that's a direct response to a
Trojan's or spyware's out-going signal is also authorized.

ZoneAlarm, Kerio, or Sygate are all much better than WinXP's
built-in firewall, and are much more easily configured, and there are
free versions of each readily available. Even the commercially
available Symantec's Norton Personal Firewall is superior by far,
although it does take a heavier toll of system performance then do
ZoneAlarm or Sygate.

Having said that, it's important to remember that firewalls and
anti-virus applications, which should always be used and should always
be running, while important components of "safe hex," cannot, and should
not be expected to, protect the computer user from him/herself.
Ultimately, it is incumbent upon each and every computer user to learn
how to secure his/her own computer.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
Is it worth to have a firewall with both in/out controls?

Yes.

That way when you get infected with some malware that wants to send E-mail
to everyone in your Address Book with a virus/trojan/worm attached it might
slow it down. Or maybe alert you to its presence when you get a popup from
the firewall program asking if qxzydzlkv can access the internet.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
Thanks to Wesley Vogel, DL, Chuck, Bruce Chambers,
Steve Winograd & Pop'.

As you can see I am learning quite a bit for the use of Firewall.
For an average user of Internet, there are so many basic things
to learn, but I have not found any particular news group that
teaches these common basic rules of survival. Internet has been
active since last fifteen years (may be twenty five years), but to
an average user technology is not so simple. I hope to see a
news group of 'internet.basic.rules' for the average user to
view and quickly learn the process. Pop' caught me on the
multiposting and told me to cross-post. Now I have to learn
how to cross-post.

I am sure I will ask some more questions in future.
Thanks again for the comments and help.
 
User66 said:
What is the reason for not to use multiple firewalls for a user PC or
a gateway PC ? Appreciate comments.


You achieve no extra protection, you incur the extra overhead of running two
firewalls, and you run the risk (probably small, but not zero) of conflicts
between them.

See http://www.microsoft.com/athome/security/protect/firewall.mspx which
includes the following:

"Q. Should I use both the built-in firewall and a software firewall from a
different company on my Windows XP computer?

"A. No. Running multiple software firewalls is unnecessary for typical home
computers, home networking, and small-business networking scenarios. Using
two firewalls on the same connection could cause issues with connectivity to
the Internet or other unexpected behavior. One firewall, whether it is the
Windows XP Internet Connection Firewall or a different software firewall,
can provide substantial protection for your computer."

Also note that if you update your third-party firewall to a new version, the
update routine will probably turn it off first. If the Windows firewall
isn't running, you will temporarily be left with no running firewall, which
is very dangerous. So turn on the Windows firewall temporarily before doing
maintenance on your third-party firewall.

The Windows firewall monitors incoming traffic only. Almost any third-party
firewall will also monitor outbound traffic, stopping rogue programs trying
to call home, and is a better choice.
 
Where did Steve Winograd post? I don't see it. Never mind, you
multiposted.

With Outlook Express, which you're using...

To send your message to multiple newsgroups on the same news server, in the
New Message dialog box, click the icon next to Newsgroups. In the Pick
Newsgroups dialog box, click one or more newsgroups from the list (hold down
the CTRL key to select multiple newsgroups), and then click Add. You can
choose from all newsgroups or only those you subscribe to by clicking Show
only subscribed newsgroups.

You can send a given message to more than one newsgroup at a time only if
all the newsgroups are on the same news server. To post a message to
newsgroups on other news servers, create a separate message for each news
server.

--
Hope this helps. Let us know.

Wes
MS-MVP Windows Shell/User

In
 
I am learning every day (although I am a retired fellow). I will definitely
follow your lesson on cross-post using Outlook Express. Thank you.
 
I was one of those users who was massacred by the charnoble
virus on the last day of April, several years ago. Since then, I have
learned not to trust any safety related software one hundred percent.
That was the sole reason for asking this question about firewalls.
Thank you for your comments.
 
User66 said:
I was one of those users who was massacred by the charnoble
virus on the last day of April, several years ago. Since then, I have
learned not to trust any safety related software one hundred percent.
That was the sole reason for asking this question about firewalls.
Thank you for your comments.

You've learned a valuable (and no doubt expensive) lesson:
It's important to remember that firewalls and anti-virus applications,
which should always be used and should always be running, while
important components of "safe hex," cannot, and should not be expected
to, protect the computer user from him/herself. Ultimately, it is
incumbent upon each and every computer user to learn how to secure
his/her own computer.


--

Bruce Chambers

Help us help you:



They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell
 
User66 said:
I was one of those users who was massacred by the charnoble
virus on the last day of April, several years ago. Since then, I
have learned not to trust any safety related software one hundred percent.
That was the sole reason for asking this question about firewalls.


Asking is fine. Always better to be safe than sorry.

Thank you for your comments.


You're welcome. Glad to help.
 
Back
Top