Trying New Security Approach on Laptop

[Znod]

Hi Friends:

I am trying a new security approach on Vista on my laptop. I am using only Defender, Windows Firewall, and Avast! Home (free). I am giving Defender a chance to do its job. We'll see.

For clarity, what I am not using that I usually use in addition to Avast! is Ad-Aware SE+ (with real-time monitoring), the OneCare firewall, and No Script wit Firefox. In other words, I am taking a sort of minimalist add-on approach.

[CrowdAds]

[Davehc]

Hi Znod.
Are you going through a router? If so, why not try one step further. I have only used my router firwall since year plonk. I have never had any outside attacks of significance. Router Firewalls are also quite configurable if you have any reason to customise.

[crabby]

Yeah, if you have a router... use its firewall and block all incoming ports, except maybe 1 or 2 you would use personally (for torrents etc). Also never had a problem! But I always put a personal one up during LANs

crabby

[Znod]

You guys are right. I used to use only our router firewall. Maybe I turn Windows firewall off too, but then I'll end up will all those annoying something is wrong with your security messages.

[Sylar]

Can't you just change the settings in security center? (Under change the way security alerts me)

[felix8406]

Josh is correct. You should be able to turn off security center alerts through the security center options. The security center can be found in the control panel.

[Znod]

Right guys. But, I never seem to get it to leave me alone. But, incidentally, I changed one thing. I could never get Windows Firewall to work properly with outgoing. Some reports say it is disabled, while others say it just is the devil to set.

So, not feeling comfortable with no outgoing protection, I uninstalled avast! so I could install OneCare beta. Then, I turned everything off about OneCare except its firewall and reinstalled avast! And, now I've turned Windows Firewall off. We'll see if I can keep it from bugging me. And, by the way, I still get Defender updates through Windows Updates.

[ProCookie]

i allways thought that you needed both firewalls on? the router firewall to block ports and the system firewall to notify you when a program is trying to unlock the ports, ahhh well maby im wrong but i allways have both on for extra security.

[crabby]

You can definately do that Ant... i just dont ned to know about any programs trying to use ports, all the ports I want to use are open!

crabby

[ProCookie]

does windows firewall use up alot of resources??? if it does then mabey i should turn it off and beef up my router firewall

[felix8406]

I found this article at http://www.cnn.com/2006/TECH/interne...eut/index.html. It shows how a program can be used to bypass government firewalls. If someone can bypass those level of security, bypassing a firewall in someone's computer shouldn't be that difficult.

[Davehc]

One of my ralations is an executive in an Internet Security organisations. I copied this from a very large write up which they issue to potential customers:


Chances are, if you are a small business, you may not even need a firewall. If you are using a dial-up modem connection, or are using an on-demand ISDN connection to the internet, a firewall is usually not necessary. This is because your internet connection is only operating when you need it. If your internet connection is down, then an outsider has no way of connecting to your LAN via the internet, and so a firewall is unnecessary.

Here's an example to illustrate this point. Let's assume that your office has an internet access appliance such as Webramp or Netopia. When someone on your LAN needs to access the internet (i.e., to browse a web page, fetch e-mail, etc.), it brings your internet connection up, and then drops it once the connection is no longer needed. This minimizes the cost of your internet connection, and it also makes it very difficult for an outsider to connect to your computers. Not only must he correctly guess the IP address of your machine (it often varies from session to session with dial-up and ISDN connections), but he must also have guessed your user account and password, AND he must correctly guess exactly when you have an active connection to the internet. If you are an occasional internet user, and your connection is down most of the time, it will be very difficult for somebody to compromise your computer if you are using a dial-up connection.
If you have a dedicated internet connection, one which is up 24 hours a day, then putting a firewall in place is probably a good idea since a hacker could systematically try to break into your machines in the early morning hours when you are least likely to detect it. (Most break-ins usually go undetected unless the intruder damages or erases files from a machine).
Selecting a firewall
I recommend buying a router that has a firewall built into it. This is usually the most cost-effective solution, is easy to set up and administer, and does not require the purchase of superfluous hardware. If you already have a router in place, a stand-alone firewall may also be a good idea, especially now that low-cost turnkey units are starting to appear. Unless you are an expert in networking software, I generally don't recommend software-based firewalls. Most router vendors now offer basic firewall services either as a basic feature or as an optional upgrade. Ascend, for example, has a firewall upgrade for their Pipeline 50 series of ISDN routers. It only adds a small amount of cash or so to the cost of the router, and so it's a great value compared to buying a standalone appliance.

[crabby]

Originally Posted by AnthonyCook

does windows firewall use up alot of resources??? if it does then mabey i should turn it off and beef up my router firewall

It doesnt take up alot... but don't you find it annoying when you are trying to join an internet game or something full screen... AND YOU JUST CANT GET AT THE THING TO CLICK UNBLOCK!!!

As felix says, firewalls aren't overly useful anyway. Windows firewall is even worse tbh! I mean... when you open messenger for the first time, it connects BEFORE you tell windows firewall whether it is allowed to, this is the same for alot of software.

crabby

[felix8406]

Davehc, that’s an excellent article you posted.

I think the biggest problem with firewalls, spy ware, anti-virus and other security issues is the user. We come to rely too much on them and usually fail to take a proactive approach to save our data. I believe Crabby mention about the proper format for a strong password, but most people setup passwords that are just too simple to “guess” and even write those passwords down in a file stored in the computer. I like external storage devices because if used properly, it makes if difficult for hackers to get into them. They can also be easily turn on or off or disconnected when not needed.

After I posted the above message, I came across this article from MS concerning setting up a strong password. So I'm editing the post to add this info. Good reading. http://www.microsoft.com/athome/secu.../password.mspx

[Znod]

Hi Guys:

My stuff kind of got lost in the shuffle. I am concerned with outgoing possibly more than incoming.

I have turned Windows Firewall off, and our router has a good firewall. crabby when you mentioned a game, were you talking about the outgoing part of the Windows Firewall? Well, as said, it either is disabled or is very difficult to set.

As said, I really are more concerned about outgoing than incoming, but not being the expert crabby is, I am using both the incoming and outgoing blocking of OneCare. What I really like about the OneCare Firewall is that it is even easier to use than ZoneAlarm (free). It simply asks, whenever some outgoing is blocked, if one wants to allow always, to allow once, to allow it never, etc.

And, it comes with a list of unblocked MS outgoing programs. If I knew enough, then I'd prefer to allow them myself if I wanted, but I don't know enough about what MS programs to allow or block. So, even though MS's best interests are built into the list, I am happy to have it.

When you talk down firewalls, remember that everyone does not know what some of you do. For example, at best, I am an interface geek only. Oh, and my connection is always on.