Networks

Ask something
Discussion Locked

firewall for peer to peer network?

0 helpful
13 replies

by millhouselives 1 view

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Hi,

I have a small peer to peer network with 5 computers. One computer with XP is connected to dsl modem and linksys router. The other four share Internet connection via that computer. All have NAV. We want to add a firewall, do we need to just put the firewall on the computer that is connected to router and dsk modem or do we need to put firewalls on all five computers. We do not have a lot of money. thank you for any help

13 replies

by thechas

The computer that connects directly to the DSL line needs a firewall the most.

The main reason to consider a firewall for all computers is to prevent a compromise on 1 computer from impacting the other computers.

The Pro version of Zone Alarm sells for $40 (US). So, for $200 you could protect all 5 computers.

Zone Labs offers "Enterprise" solutions. But, they do not list pricing on their web site.

Chas

by brian

I would get an inexpensive but effective router like a d-link 604+ it will provide a physical firewall. All requests from outside will stop at the router unless you specifically configure the ports to go to a computer. Cost $30-$45.

Software firewalls like zonalarm allow for program control but most users don't know what the programs are anyway so they say yes all the time which defeats the purpose. The other problem is once Zone alarm is installed it can cause nasty problems when it malfunctions. Like you can't access the console and you cant get on the internet either. I have used them I find them to be a blessing and a curse. I wouldn't use the software firewalls, but you can still add them on if you like. The router will do fine though.

by millhouselives

Thank you for your replies, but I am still a little confused and would like some more information before question is closed. I understand about the router having a firewall (NAT) and the router we have is (my mistake) a netgear mr314, not a linksys.

As far as a compromise happening on one computer affecting the other computers would not we be safe from worms, spyware, etc if the Norton antivirus that is running on all the computers is uptodate and running.

In other words, the netgear mr314 does have NAT, i checked. We are running NAV on all five computers. So, with our current configuration we do not need to add any firewall software to any of the computers and we will still be safe from backdoor worms, spyware, etc. Is that correct?
Poster rated this answer.

by mikex

Install a free (for personal use) ZoneAlarm firewall on the Main PC (which share the Internet connection - Main PC), the best option is to use a small proxy software and to connect the other PC's thru this proxy (on Main PC) - this will protect all of them

by thechas

I would rate your present protection at around 60 to 70%

Adding a software firewall would raise the level to around 85%.

The problem with ALL anti-virus software is that each new virus or worm exists in the "wild" for a period of time before the anti-virus software can detect it and stop it.

The timing of an update for a new virus depends on when the AV company gets a copy of the virus, how long it takes to create a detection and removal algorithm, how long it takes to test and deploy the update.

A virus could exist undetected for weeks, and only be found and a fix worked on after it released a time delayed payload.

My point, each additional layer of security you add to your network improves the overall security.

Chas

by jcreaghan

Your Netgear box should provide you the most protection provided it's configured properly. It will also allow you to filter out certain web sites as well. For added security only open the ports you need on the firewall, and as a backup install XP Service Pack 2 Release Candidate on your XP boxes. The firewall is pretty good, and best of all free. When firewalling a network you want to place it in a gateway position in front of any computers you want to protect.

by fraz

Anyone with a little unix knowledge can setup an OpenBSD firewall without too much problems.

All you need is an old PC (486 or PI with 64 MB RAM will do) and two NIC's.

More info: http://www.openbsd.org

This discussion is closed to new replies.