Posts: 639
Name: Steve
Location: Birmingham, England
|
Quote:
Originally Posted by highanddry
I don't find windows firewall to compromise any external firewall and I wouldn't turn it off. If you use Nod32 and keep it updated and run scans you should be golden
|
An external firewall, ie on a router, will not cause too many conflicts. Having two firewalls on the same machine, such as the Windows firewall and Norton firewall, will cause conflicts, hence why I said if you are going to use a third party firewall, turn off the Windows firewall.
When I say external firewall, I mean one that resides on dedicated hardware, such as a router.
External firewalls, if configured properly should cause little or no problems. But then again, if you’re using a router, then it will be using either NAT or PAT and it would be very difficult for the outside work to see your machines.
However! The biggest problem is users downloading something off the Internet that contains a trojan or some program to that affect, which then sends data from your machine to a remote location, such as a server. Now because the data came from your machine, Windows firewall does not filter outgoing traffic and also the router thinks that the data is valid, and so stores information regarding the data, such as source IP (eg 172.16.1.2), destination IP (eg 156.35.89.32) and I think port number. When the "hacker" attempts to connect back to your machine, the router and Windows firewall allows the traffic, because the original data came from your machine, and so they both allow the "hacker" to connect to your machine. But a properly configured external firewall (such as the one built into most routers) will help prevent this from happening.
|