Help - what is the best firewall for home PC?

Discussion in 'The Bench' started by 12lives, Jul 14, 2005.

  1. 12lives

    12lives Control the controllable, let the rest go

    I have a desktop PC on a cable wireless modem. I run Norton, spybot, epestpatrol constantly. It is so trashed with junk it will barely run. I do use IE (I know I know), but it has some securty features that I like for what I use it for.

    I am going to re-format the hard drive and rebuild the OS. I like 2000 so I'll use it. I will start to use Netscape as my browser. But I know as soon as I hook it up to the internet it will be under attack again. How do I completely stop any and all spyware adware hijacker virus popup keystroke villians? :af: I assume a firewall will do it? I do not want to give up speed or stability though... :Dou:

    Recommendations :Comp: ???

    - Bill
     
  2. armyguy298

    armyguy298 Well-Known Member

    A firewall isnt going to help if you keep inviting that crud into your home. The best way is to make sure you have the latest anti-virus/spyware blockers and that they are up to date. Second, do not use your computer as an administrator. Make a seperate account with limited priveleges and use that when you surf. Do not go to questionable websites. Go to this website to test for browser security holes:

    www.jasons-toolbox.com/BrowserSecurity

    Go to tools in IE Explorer and click internet options. Select the privacy tab and click on advanced. Select to overide cookie handling and set 1st party cookies to accept and prompt all third party cookies. If you ever see the prompt and you do not like what you see, then do not accept the cookie.

    Go to the security tab highlight the internet zone. Select custom zone. Make sure that ActiveX controls run only if signed. Make sure unsigned ActiveX controls are disabled.
    Make sure Java is set to high safety. Use another JAva program such as the Java plugin at:

    http://www.sun.com/download/index.jsp?tab=5

    Download the download manager and it will install the latest version.

    Make sure you have Spybot v1.4 and it is updated weekly. Immunize your system each update and scan weekly.

    If you are using a wireless router, it already has a builtin firewall. Enable the Windows XP firewall if not already. UNLESS you have a home network setup. Otherwise you will probably need an aftermarket program such as ZoneAlarm and have to configure it..

    http://www.zonealarm.com/

    Ill tell you what: I do not have an anti-virus program on my computers. I do not have Norton SystemWorks on any computer. I run Spybot religiously, and HijackThis if I think I am infected and they always come back clean. I also use Mozilla Firefox. While its popularity is gaining, it is still not the vehicle of choice for hackers and malicious programs.

    www.mozilla.org

    I do not download anything that is suspicious. I use an third party email provider like yahoo that has automatic virus scanning. I stay away from websites that are known to install crap on my computers. (porn) I stay with the trusted ones. :laugh:

    I hope this helps you, feel free to contact me with any questions.
     
  3. staircasesurfer

    staircasesurfer Alex Prins



    i also use firefox, its a far superior browser than ie, and you can get alot of nifty plugins
     
  4. mechacode

    mechacode Well-Known Member

    Using IE is like throwing salt water at your undercarriage, sure it looks ok for awhile but you'll pay for it in the end.
     
  5. Truzi

    Truzi Perpetual Student

    Using M$IE is like putting a huge wing on the back of a wagon-wheeled FWD 4-cylinder rice-burning econobox. :)
    As for speed and stability - you can't give up what Windoze doesn't have.

    Forget Windoze, install Linux.

    I like 2000 best of all M$ operating systems. Even if you have XP, get another firewall in addition to the built-in one.

    I've not used antivirus either. A big part is not downloading things mindlessly, not opening suspicious emails or downloading unsolicited attachments - stuff like that.

    I did get hit with two worms (they found an opening in Win2000), so I started using Kerio Personal Firewall (was Tiny Personal Firewall at the time). It has kept me safe ever since, and is free. Though I'm a linux convert now.

    Definitely use Spybot Search & Destroy. Also, make sure you have all the critical updates for windoze - they often patch holes that allow malicious programs in. Check for windoze updates, anti-virus updates, and anti-malware updates religiously. Make sure you have the latest versions too - and try to scan in safe-mode if possible (some anti-virus programs won't run in safemode - but neither will many viri).

    Some of the features that Internet Explorer has (and Firefox doesn't) are things that can cause problems - like Active X and Browser Helper Objects. Use Mozilla Firefox (which is what Netscape is based on) as your main browser and only use M$IE when Firefox won't do a page that you have to view.

    Do yourself a favor. When you complete your install, make an image of it and store it someplace. That way, if it ever gets messed up again, you can just restore the image (not the same as XP's system restore) and you've got the fresh install again.

    Also, store everything you work on in one place (like My Documents). You can have subfolders in it (like "Music," "Pictures," "Billing," etc.), but make sure everything goes to one place. That way, if you ever have to reinstall windoze, you have all your important stuff in one place - so you only have to backup that folder before a reinstall (otherwise you have to go through and find everything you want to save).
     
  6. Annie Oakley

    Annie Oakley Well-Known Member

    I am running WinXP Home Edition with a DSL connection. I have:

    MS AntiSpyware, FREE, auto updates & runs on a schedule and guards continuously
    ZoneAlarm Firewall, FREE, auto updates & runs continuously
    SpyBot S & D, FREE, update & run it once/week
    AdAware, FREE, update & run it once/week
    Norton Systemworks/Antivirus, auto updates & runs once/week

    I just purchased Trojan Hunter and ran that, too. You can get a 30 day free trial, and supposedly un-install it and get a freebie again, but I couldn't get it completely un-installed, so I just bought it.

    Also have WinXP set to auto update upon every startup, so it gets the MS Windows updates itself, and (I think) some of my driver updates.

    I'm on this thing ALL the time, leave it connected alot. Have very few problems. AdAware always finds stuff, mostly lo-priority, sometimes get a Trojan, not often. ZoneAlarm works pretty well once it learns what you are doing.

    Hope that helps!
     
  7. 12lives

    12lives Control the controllable, let the rest go

    Thanks all - stay safe out there!

    - Bill
     
  8. skyphix

    skyphix Well-Known Member

  9. 12lives

    12lives Control the controllable, let the rest go

    Thanks Eric - does that slow down the computer at all?

    - Bill
     
  10. skyphix

    skyphix Well-Known Member

    MY experience with it - no. I havent used it in a while as I have a physical firewall but a friend of mine (also a computer professional) swears by it.
     
  11. Truzi

    Truzi Perpetual Student

    Any program that is running will use the CPU - slow the machine a tiny bit. You won't notice it with most of the stuff people have mentioned here... and even if you do - its a lot better than how slow you will run with malware.

    Have you seen recently where the M$ antispyware now automatically ignores Gator/Gain/WhateverItsCalledNow? Makes you wonder.

    I've seen some infections with the XP firewall. I've never had one since I've used Kerio, and I know people who've never had one since using Zone Alarm. Whatever you do, get a firewall first. Antivirus software will be a backup in case the firewall is compromized.

    The XP firewall only blocks incoming connections - so if you are already infected (or downloaded something bad) it will not prevent your machine from sending things out - which will slow your connection - and if a program (even virus) on your machine requests something, the incoming data will get through since it is not "unsolicited."

    Also, Windoze likes to phone home, for reasons that have yet to be made clear. When running a firewall, I do not allow windoze to send out data on its own. Consider the growing use of root kits and a seemingly harmless communication from kernel to the outside world might invite more trouble.

    As for Linux, I just let it run with no precautions. Spyware and viri are almost non-existant, though someone could hack their way in (but they'd likely go for an easy target instead). I will lock it down soon, but more for principal than vulnerability.

    An old computer can be used as a dedicated firewall. You could even get a cheap Wireless-B router that has a firewall. Linksys and D-Link have them for $5 after rebate. I'd still have a software firewall on the machines you use; can't be too careful.
     
  12. MPRY1

    MPRY1 Gear Banger

    I'd go with Firefox for a browser and buy a cheap router. Most have a built in hardware level firewall which is far better then any software firewall.
     
  13. 12lives

    12lives Control the controllable, let the rest go

    I am using a LINKSYS 802.11b wireless router now. Did I not set it up correctly? How do I activate the built-in firewall?

    - Bill
     
  14. StreetStrip

    StreetStrip Well-Known Member

    I will vote for ZoneAlarm

    Even the free version is rock solid safe.
    I have used it for a few years now with 0 problems.

    I would assume the paid for version is like fortknocks.

    I also filter most of my mail through 2 servers with spam and virus protections.
    My main mail address checks them then forwards them to another server where they are checked once more and where I download them. The only account that spam gets through on is only filtered once.
     
  15. GoldBoattail455

    GoldBoattail455 462 -> TH400 -> Posi

    I've had my dell since August '03 and I have used IE ever since. I just now renewed my Norton anti-virus scan. Never had any issues.
     
  16. Truzi

    Truzi Perpetual Student

    In a browser address field, go to the following address: 192.168.1.1

    That will get to to the administration, which is all done by webpages. The pages you'll see are on the router itself. I have the wireless G router, so I'm not sure if your administration differs. Here is what I'd do if the configuration is the same or similar on your router.

    The default Username and Password should be Admin and Admin. You'll change this later (I'm covering the administration pages left to right).
    There is a Wireless link at the top. Go there. Under Basic Wireless Settings, if you are not using the wireless feature, disable it if possible. If not, disable Wireless SSID Broadcast. Be sure to Save Settings.
    If using wireless, under Wireless Security I chose WEP security mode, and used the highest Encryption (128 bit). I made up my own key that contains letters and numbers, and is quite long. Write this down in case you need it. Be sure to Save Settings.

    For the Security link, Enable Firewall Protection, and make sure you have check marks in Block WAN Requests, Block Anonymous Internet Requests, Filter Multicast, Filter Internet NAT Redirection, and Filter IDENT(Port 113). Be sure to Save Settings.

    For Applications & Gaming, go to the DMZ (DeMilitarized Zone) link and make sure DMZ is disabled. DMZ basically lets you set it up so you can connect a specific machine and not have it firewalled - for it to work you'd have to give it the IP of the machine you'd want to do this to. Be sure to Save Settings.

    Under Router Administration, make your own password. This is important, as the default is well known. Make it long, with numbers and letters.
    Access Server as HTTPS.
    Disable Remote Access Management
    Disable UPnP
    Be sure to Save Settings.


    There is more you can do, but that's a good start. A free software firewall on your computer would be a good way to add a little extra security.
    Your router, though "hardware," is really a mini-computer running software - so the firewall is, technically, software. Don't worry about that, I'm just splitting hairs.
     
  17. MPRY1

    MPRY1 Gear Banger

    I would also follow the procedure that Truzi stated below. One thing that I ran into when setting up a family members Linksys 802.11b router was that it required a firmware update to get more security functionality. You can obtain firmware updates for your router at Linksys' website.
     
  18. Stage1 Jeff

    Stage1 Jeff Guest

    where can i get the linux OS software?
    my XP home has been running slow lately
    is this linux really better?
     
  19. Truzi

    Truzi Perpetual Student

    If XP is running slower than normal for you, there could be a few reasons. First of all, it is slower than 2000. Service Pack 2 will also slow it down. However, the problem is probably malware (adware, spyware, viri). Get some of the programs people mentioned above to clean up all the bad stuff and see if that helps.

    Try it out first. Download Knoppix. It is an image, so after its downloaded, have your burning program "burn CD image."
    Then, put it in the computer, and reboot. It does not install. Instead, it will run from the CD. It will run slow, because a CD is slower than a hard drive, but it will let you play and experiment. It will not allow you to hurt your hard drives (unless you know what you are doing, lol).
    Try surfing the web, opening M$ Word files with Open Office, play Frozen Bubble (its addictive), listen to some net radio or MP3z (with XMMS). Just experiment. You can't really hurt anything.

    If you like it, there are many versions of linux you can install. Most are free. Knoppix is a version of linux (and is based on Debian), and you can install it if you want (making it run very fast). Debian is very nice, and makes installing software and even upgrading the whole OS easy. Ubuntu is also very nice, based on Debian, and gaining popularity fast. Mandriva (formerly Mandrake) is quite good for beginners. Redhat Fedora is good. You can even get FreeBSD, which is UNIX - Mac's OS X is based on it (not the programs or desktop, but the core of it). There are so many more, but stick with the major ones, at least to start.
    One Caveat, though - no tech support in the sense of calling the company on the phone. However, the web has more information than you'll ever need to get things working.

    While you can do anything on Linux with the command prompt (DOS box), most of it is now point and click, just like windoze.

    Linux is not for the faint of heart. On many levels it is better - unless you want to pay money to consume inferior media (or any at all after the new standard comes into effect), be forced into what kinds of things you can do on your machine, worry about security adn crashes, and basically not own your own machine.

    Seriously, though. It is faster and more stable. It will run better on old hardware (since you can control how bloated the OS is, unlike windoze). It has far better security, and few, if any, viri will attack it (none found "in the wild").

    On the other hand, you cannot run windoze programs on it (well, you can, but you have to really get into the technical stuff - its getting easier, though). That means probably no windoze games.
    Installing programs will not be as easy as windoze - though its getting easier. Most of what you need will be installed when you set up the OS - it all can be done at once.
    Getting a virus or other malware will be nearly impossible (at least for a very long time).
    There are a few things you cannot do, but this is not an issue from a productivity standpoint.

    You won't be able to view window media videos (well, you can, but you'll have to find the right program).

    On the other hand, Linux is free, and there are free programs for just about anything you'll need. A free Office suite that is 98% compatible with M$ Office. Free media players for video and audio (including MP3). Web browsers, email clients, etc. Free IM programs compatible with ICQ, AIM, MSN, Yahoo, etc. (often all wrapped in one program). There is an awesome CD/DVD burning program.

    Linux doesn't play well with fake modems ("win-modems"), but this is changing - though I don't see why. It works great with real modems. Broadband works with no problems.
    USB drives work well, and there are programs for digital cameras so you can download your pictures. It is not as well supported as on windoze, but you can probably do most of what you need.
     
  20. StreetStrip

    StreetStrip Well-Known Member

    I would just try linux first if your a newbiee.
    Knoppix is a good test OS on CD.
    There is a learning curve involved though.

    I think the news of Apple switching to Intel is neat if they finally release the OSX for everyone. Not just for the apple only computer.
     

Share This Page