Security
by thechas
I don't trust D-Link networking equipment or any "home grade" hardware firewall.
They just are not as robust as the products from the commercial networking firms.
Once the hackers find the way through these hardware appliances your only recourse is a new device.
For a home network, a good software firewall is the best choice.
Of course, with any network security device, your personal diligence and the time spent maintaining the device, reviewing logs and installing updates is the most important part of the security task.
Yes, devices like a D-Link Router with a firewall are simpler to setup than a good software firewall. But for any security system, the easier it is to setup, the easier it is to break through.
Chas
by michaeltsen
by damnager
by rvdalvi
I've tested Mc Afee Antivirus software with Mc Afee Personal firewall included on its package and i advice that its full proof, Norton Personal Firewall and other Software Firewalls are in "my opinion" due to friends remarks are easilly bypassed by computer worms and some other email spreading viruses especially worm blaster if you need testing if your firewall is full proof just visit the link i had posted below.
http://www.grc.com/lt/leaktest.htm
Alvie,
PPCOMP President
by mrafrohead
Although if that isn't an option, then I would use your hardware router WITH a software firewall that TheChas talked about.
Dual layer protection IMO is best. Then if some assclown gets through your first layer you still have a backup until you notice something happening.
Not to mention, SW firewalls are really good to keep your computers from talking out to places that you don't want them to.
Mrafrohead
by thechas
I fully agree.
If a computer is not connected to a network, or is not on, it cannot be hacked or infected.
(Well, non-networked computers can be infected from sharing infected files.)
Despite the general consensus that your computer will last longer if you leave it on, I recommend to ALL users that they should shut their PC down if they will be away from the PC for over 3 hours. If a PC is not on, it cannot be hacked!
Zone Alarm is (the last I saw) the highest rated software firewall.
Like any security software, you do need to keep an eye out for updates, and install them religiously.
Chas
by oz_media
The only security to completely stop all infections and hacking is to not have an internet connection and NEVER place a disk in your PC.
Other than that, there are a tonne of home routers that use WEp encryption, Port Address Translation etc. everything is hackable though. Unless you are willing to invest several thousand in a secured server and NOS (which is still hacked but less frequently) then there is no failsafe method, don't be fooled into thinking you're secure, and even WORSE, don't ever tell someone you are secured, they will hack you just to prove you wrong. I've left countless signs of my presence on people's machines when they claim to be secured (only friends and associates of course).
by hal 9000
Is no security at all!
The very best that can be hoped for is to make the data useless to whom ever as by the time they get to see it it has become so outdated that it is useless to them.
Otherwise you are living in "Dream Land" if you really believe that anything better can be expected. What most people/companies do is to make their systems as secure as possible and then not "Advertise" the fact that they have a network in the first place. This involves not hosting web pages and the like on the same system as you're work network is on and even going as far as removing the work system from the main web interface through various devices that not only block ports but monitor all traffic that goes through them and records it.
While it is not talked about all that much here there are still around 50% of all "Hacking" cases performed by staff members so you have to be very careful with who ever has access to the network in the first place as well and while this is not technically hacking it is possible with the right equipment to see everything on any CRT monitor in a van up to 500 meters away so even with the very best security in place it is still possible to see what is being done on any CRT monitor from a fair distance away which still allows the data to be let loose in the public domain if it is that important. Short of having a Faraday Cage around the office any electro magnetic field can bee seen. And even if this measure was to be taken it is still possible to use the electrical wiring to gather the information from as well.
So short of never turning on a computer there is no real security for the stand alone unit let alone a network.
Col
by hereinoz
Col, I guess it is about "Acceptable level of risk" If we want to be perfectly safe in our life, we would never go outside, and then we would still be in danger of the roof falling in when we stay "safely" inside.
As you say, we can get things as secure as possible but there will always be those that will want to have a go.
The strangest thing though is users who develop a Fortress mentality. Those who won't read their e-mail for fear of getting a virus, or they won't access a web site for fear of malicious scripts being run.
They then tell you that the only thing they use the internet for is to access their Internet Banking, with a password that is the same as their first name!! All because they trust the bank not to do them any harm!!
It is a wonderful world.
by oz_media
But the free version is a continual headache on ANY install I've used it on. People usually put up with it for a few days then beg me to remove it as it is unstable and unresourceful.
They do have a professional version that you PAY for but the free one is just BS, sorry.
by michaeltsen
by hereinoz
Can't agree Oz. I've been using free Zone Alarm on single computer installs for years and it works fine for me. The biggest problem I run into is users who don't like the restrictions that a firewall places on their activity. Voice over Internet and things like that.
If the user wants the firewall off, OK, but those that use it properly and understand it, and that is the key, wouldn't leave home without it.
I also use free Zone Alarm on networked machines that are behind a NAT router. It gives the freedom to assign ports in the router for ports on particular machines on the network, then protect access via those ports by blocking them to all but trusted IP addresses.
VNC is an application that works well in this way. Deny it Internet server rights, but allow server rights in the trusted Zone, then only allow the IP address of the authorised accessor to pass the firewall.
Alan
by michaeltsen
by thechas
I agree if, you are talking about a "real" hardware firewall appliance.
Just as the so called routers offered by the home networking companies are limited in their functionality, I don't believe that a D-Link hardware firewall is going to be as strong as a good software firewall.
After-all, just how much of a firewall can there be in a $60 combination router / switch / firewall?
If were talking serious hardware firewalls from companies like Cisco or Symantec, then YES they are better than a software port blocker.
The home network user who installs a low cost hardware firewall that they picked up at Best Buy is going to be lulled into a false sense of security.
Chas
by michaeltsen
I agree in principal ...
Ppl who would go for an all-in-one HW is usually looking for a router. If that comes with basic IP/port filtering, I think that is great. If those buyers are happy with that filtering feature, they typically do not have the serious needs of security. As time goes by, their security needs may increase but still not in urgency. Then some form of software emulation comes in place. When they start using those softwares, they are 'forced' to learn security. When they really understand security and after facing the trouble of maintaining SW settings, they will realize the investment on HW security devices worth it.
My thought is that home user typically do not need serious networking HW nor the time to learn the SW settings. When the privacy of a home networking is invaded, none of the HW or SW matter because most of the invasion comes in the form of human interaction and compromises (my initial posting).
My Linksys wireless, router + switch cost me about USD 80 too. I belive Linksys is Cisco based too and I think the FW setting is quite OK. If D-Link doesn't have the basic filtering features and cost the same then perhaps home users can consider Linksys.
I still use Zone Alarm ofcourse. So from my above view point, you can see I am still in my learning stage ;-)
by hereinoz
by hal 9000
I just love you're response as you are perfectly correct yes there are people like this around and yes I've run across then as well but what really gets to me is how they dispose of their hardware once it has passed it's use by date. No wiping the HDD they just sell/donate it to whomever expecting the right thing to be done all the time as well.
You're perfectly right {It is a Wonderful World.}
Col
by rvdalvi
During my research, The NEW!! D-link wireless/router w/ the software Mc Afee Antivirus blocks viruses and worms that spread on email, also it is fully tested to track down any PC hackers trying to access your computer.
to conclude this I am right D-Link is a powerful security tool and w/ the help of Mc Afee Antivirus software i will assure your computer is 100% safe and fully secured
by dwdino
"to conclude this I am right D-Link is a powerful security tool and w/ the help of Mc Afee Antivirus software i will assure your computer is 100% safe and fully secured"
I now have in writing that you (personally) have promised that if I hacked behind a D-Link router I can seek reparations from you. I hope you are well insured! LOL
Seriously, I use a software product called Astaro (http://www.astaro.com). It is quite a powerful software suite of products. Built upon linux, it incorporates IDS, Firewall, Filtering, Antivirus, ...
Anyway, there is a free license available for 10 protected IPs. I highly suggest those interested in seriously border protection (or internal for that matter) give it a look.
by hereinoz
by elf555
This discussion is closed to new replies.
Sort by Trending