Ok here is the deal. I have a static IP range and I was running all my computers with static IP addresses, so I was using zonealarm free as a firewall for each and it did an amazing job.
However I was expanding my network to greater than the 5 static ip’s I have and that combined with the fact that I was using bad network security practise through using all public ip addresses I opted for a high quality/business class router.
I bought a Draytek Vigor 2800 after much research, mainly for its firewall features, cost, VPN and more importantly Multi-NAT support.
So I now have my Vigor 2800 configued so I have a huge private ip range and have my webserver on my private network but rerouted to a public ip address from my range to allow it to work as a server online. I am also considering using another of my static addresses as a VPN gateway to connect my work machine to my home network but I will look into that (and most likely post a question about it) later.
Anyway, my question is this. Do I need zonealarm on my home computers that are on my private network anymore. I have turned on most of the firewall features of the router but do not trust taking off my individual firewall installations, if the computers are on a private range are they protected from hackers?. None of the computers are rerouted using NAT, only my webserver is live on the net, everything else is on my private range but has internet access.
I have a windows 2003 server I use as an mp3 server, it does not have a firewall on it. It has internet access but is not multi-NATed to be live on the net, does this need a firewall?
I am confused as to when a firewall is needed on a private network. Is zonealarm and the like needed mainly for when people have 1 computer connected to the internet or for spyware/viruses that may connect out to the internet for malicious reasons.
Any strong info on this subject and definitive answered would be excellent.
