by instronics on Fri Sep 09, 2005 4:02 pm
Hello everyone.
Ive seen some posts here about some people using 2 or more firewalls at the same time. This is a VERY BAD idea. 2 or more firewalls DO interfeer with each other in a negative way, sometimes silently and unknown to the user. Not to forget the fact that having to maintain 2 or more of them means more work, more resources and obscurity through security. Bad bad bad. One correctly configured firewall is more than enough (that is if you do go for a firewall solution).
On windows, i can recomend Outpost by Agnitum. Its by far one of the best firewalls for windows based systems. But...... it does need some knowledge on tcp/ip, protocols, ports, services and security concepts in general. If you are looking for a firewall that all you need to do is to click on next, next, yes, i agree, next, finished then dont use a firewall at all. The biggest joke i ever saw was with ZA, and every time you booted the pc, a window would popup when ZA was loading and said "Zone alarm is now loaded and you computer is now safe". ROFLMMFAO. Thats BS.
I know that most users cannot be bothered with details on security since all they want is to play games, surf the web, and some emailing here and there. But, on the other hand its like a car. If you own a car, you have to refuel it, you have to check the oil, you have to check the air in the tires. You have to take the time and learn about a few basics when it comes to security. Not only for the protection of your data, but also the responsibility you have towards others once you are connected to a network, as in preventing malicous codes to harm others. On the other hand, also think about if a firewall is really needed. I know many people who have their systems tight as hell without any firewalls in place. A firewall is just an application, that can be brought down like any other application, not to mention the resources it uses. There are many exploits out there that just eat ZA, and norton firewall up for breakfast, which messes up the entire box at times too. But to keep things a bit more simple, the 'no firewall' scenario is maybe for more advanced users.
1 firewall is enough if correctly configured, and maintained. Its the admin/user who is responsible for the computer, not the software. If you dont read your firewall logs periodically, then why have a firewall? If you set it to allow tons of stuff just to avoid those naggy popups about allowing this or that, then why have a firewall? The golden rule to firewalls is actually really simple:
Block EVERYTHING and ONLY ALLOW WHAT YOU REALLY NEED.
When it comes to AVs, i can recomend AVG, and McAffee. Ofcourse they are not bad, nor good, but there is no AV application that will keep out ALL viruses. Period. :p
Also a combination of Adaware and Spybot together with one FW, and one AV is a neat set that is enough for 3rd party security. From there on its about securing and tightening your OS. Make sure you have everything patched upto date, and make sure that only what you really need at that moment is running. I know that on windows it sounds hard, but its do-able. Some of the things are really simple, like dont go online using an administrator account, always use strong passwords, make sure you know which system files have which permisions, and make sure that you log and study what is logged.
LOL, sorry for this huge lecture, when the question was actually small and simple.
Firewall: Outpost
Antivirus: AVG or McAffee
Spyware: Adaware AND Spybot Search and Destroy
For linux i recomend IPTABLES (Muahahaha)
And AV i would say Vexira. (for linux the AV is less about protecting your data, but rather more the responsibility you have towards others, as in sending infected files to them).
Cheers.