Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop dns driver drivers error ethernet excel freeze gaming graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard network printer problem ram registry repair router slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
SPI Firewall, Is it enough?

Reply  
Thread Tools
llmercll's Avatar
Computer Specs
Member with 59 posts.
 
Join Date: Nov 2008
13-Nov-2008, 02:43 AM #1
SPI Firewall, Is it enough?
Hey all I'm just wondering if having my routers SPI firewall is enough protection for my network. I have a linksys router with dd-wrt flashed on it, and i hear that's very good firmware. I also have a wireless connection running with WPA2 security.

I just want to know if i should install another firewall program, or enable windows firewall.
mrss's Avatar
Registered User with 722 posts.
 
Join Date: Jun 2007
14-Nov-2008, 08:23 AM #2
The router's NAT translation will block random outside attacks from seeing your PCs IP address. With SPI, the router looks at data for known patterns and discards data it thinks is bad. The WIndows firewall would block unsolicited incoming data that gets past the above.

Neither do you much good if a program on your PC wants to send data out, i.e, if you got hacked or fooled into installing a trojan or virus. A router would let the data out and the XP firewall doesn't control outgoing data.

So if you worry about outgoing data, a 3rd party software firewall is suggested.

One last opinion. The Vista firewall can be configured to block outgoing data, but doing so is not easy. That's a job for IT pro's, and many of them would probably just get a 3rd party firewall with host based intrusion protection (HIPS)..

Last edited by mrss; 14-Nov-2008 at 08:33 AM..
lotuseclat79's Avatar
Distinguished Member with 21,345 posts.
 
Join Date: Sep 2003
Location: -71.45091, 42.27841
15-Nov-2008, 09:30 AM #3
Check these links out for test results/ratings of outgoing firewall blocking:

* Comodo inbound and outbound firewall leak tests
http://personalfirewall.comodo.com/t...rfirewall.html
Outbound test: Comodo Parent Injection Leak test: cpil.exe
Inbound test: Comodo HackerGuardian: HackerGuardian Free Scan

Firewallleaktester.com results: Mar 11, 2006: Jetico: 23/27 Adv+ rank #1
http://www.firewallleaktester.com/tests_overview.php
http://www.firewallleaktester.com/tests.php
http://www.firewallleaktester.com

* Firewalls Outbound application filtering vs Leaktests Win 2k/XP
http://www.firewallleaktester.com/tests.htm (as of October 13, 2004)
http://kareldjag.over-blog.com/article-232553.html

I don't know if ZoneAlarm Free is still available. I used it with WinXP Pro SP2. This is a useful application for free if available. Look for a solution that has a light footprint in memory/CPU resource utilization.

-- Tom
__________________
The independence created by philosophical insight is - in my opinion - the mark of distinction
between a mere artisan or specialist and a real seeker after truth. - Einstein 1944
Imagination is more important than knowledge. - Einstein
atnskyline's Avatar
Computer Specs
Account Disabled with 332 posts.
 
Join Date: Aug 2008
Experience: intermediate to advanced
29-Nov-2008, 10:50 AM #4
no its not, gety comdo firewall its free and rated the best
atnskyline's Avatar
Computer Specs
Account Disabled with 332 posts.
 
Join Date: Aug 2008
Experience: intermediate to advanced
29-Nov-2008, 10:50 AM #5
zone alarm is ok but not as good
atnskyline's Avatar
Computer Specs
Account Disabled with 332 posts.
 
Join Date: Aug 2008
Experience: intermediate to advanced
29-Nov-2008, 10:51 AM #6
those tests are out dated from o6
mrss's Avatar
Registered User with 722 posts.
 
Join Date: Jun 2007
29-Nov-2008, 03:47 PM #7
Quote:
Originally Posted by atnskyline View Post
those tests are out dated from o6
The latest matousec ratings/test have bumped your Comodo 3.0 down to 8th position. Still rated very good.
http://www.matousec.com/projects/fir...ge/results.php

As an indicator to how much has changed, the 2007 Matousec tests that had Comodo #1 were based on the Comodo 2.4 version. That version has fallen to #14 and is rated "poor" because the guy has created new tests it can't pass the new ones.

Does that mean the test is not real world or does it mean that trojans are getting so advanced at fooling conventional firewalls that we need new updates? Beats me. I think it's more of the latter.
atnskyline's Avatar
Computer Specs
Account Disabled with 332 posts.
 
Join Date: Aug 2008
Experience: intermediate to advanced
29-Nov-2008, 06:45 PM #8
that is one source not all te magazines
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 09:16 PM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.