knowledge-database (beta)

Current group: comp.security.firewalls

belkin gateway/firewall and zone alarm

belkin gateway/firewall and zone alarm  
GavT
 Re: belkin gateway/firewall and zone alarm  
Jason Edwards
 Re: belkin gateway/firewall and zone alarm  
Wolfgang Kueter
 Re: belkin gateway/firewall and zone alarm  
Jason Edwards
 Re: belkin gateway/firewall and zone alarm  
Wolfgang Kueter
From:GavT
Subject:belkin gateway/firewall and zone alarm
Date:Sun, 23 Jan 2005 18:12:19 +0000 (UTC)
Hi

I have been using Zone alarm on my gateway PC using ICS to connect (ISDN
dial up) my home network to the internet. This has worked well for some
months. I have now converted to broadband and am using a belkin combined
modem/router which has a built in NAT+SPI firewall. I am happy that the
hardware firewall will protect me from external intrusion but would like to
use zone alarm to provide internal protection /program control. Can anyone
point me in the direction of a zone alarm setup guide for this type of
configuration. I want to setup ZA free on 3 laptops and a PC to protect each
from Trojans etc.

GavT
From:Jason Edwards
Subject:Re: belkin gateway/firewall and zone alarm
Date:Sun, 23 Jan 2005 19:29:49 -0000
"GavT" wrote in message
news:ct0pe3$f27$1@titan.btinternet.com...
> Hi
>
> I have been using Zone alarm on my gateway PC using ICS to connect (ISDN
> dial up) my home network to the internet. This has worked well for some
> months. I have now converted to broadband and am using a belkin combined
> modem/router which has a built in NAT+SPI firewall. I am happy that the
> hardware firewall will protect me from external intrusion but would like
to
> use zone alarm to provide internal protection /program control. Can anyone
> point me in the direction of a zone alarm setup guide for this type of
> configuration. I want to setup ZA free on 3 laptops and a PC to protect
each
> from Trojans etc.

ZA does not protect you from trojans etc.
What it does do is allow the trojan to be installed and then on the next
reboot it pops up a message along the lines of "do you want winservice32.exe
to connect to the Internet".
Since you have three laptops and a PC it is likely that you have at least
one user who will answer yes to the above question.

The hardware firewall will not protect you from external intrusion; however
it will ignore incoming connection requests unless you have configured any
port forwarding.
When your user answers yes to the above question then, depending on the
particular trojan, you may end up with more external intrusion that you know
what to do with.

So where do we go from here?
Well, that's difficult to say without knowing more about your experience and
knowledge and the experience and knowledge of the other people who will use
your laptop and PCs.

I'm not suggesting that the use of the belkin router is a bad thing.
I'm not even suggesting that the use of ZA is bad IF you know exactly what
it does and are able to configure it. But in most of the cases I have come
across the use of ZA has not been of benefit because the user does not know
what it does and cannot configure it correctly. It therefore increases the
complexity of the system while providing little benefit to the user.

If you want to protect yourself from trojans then I think it's a good idea
to think about how trojans may get into your computer. Perhaps you could let
me know some of the ways that a trojan may get itself installed on your
computer and then we can consider ways to prevent this.

Jason

>
> GavT
>
>
From:Wolfgang Kueter
Subject:Re: belkin gateway/firewall and zone alarm
Date:Sun, 23 Jan 2005 23:05:57 +0100
Jason Edwards wrote:


> ZA does not protect you from trojans etc.
> What it does do is allow the trojan to be installed and then on the next
> reboot it pops up a message along the lines of "do you want
> winservice32.exe to connect to the Internet".

It might not even do that.

Wolfgang
From:Jason Edwards
Subject:Re: belkin gateway/firewall and zone alarm
Date:Sun, 23 Jan 2005 22:22:14 -0000
"Wolfgang Kueter" wrote in message
news:ct1735$hcq$2@news.shlink.de...
> Jason Edwards wrote:
>
>
> > ZA does not protect you from trojans etc.
> > What it does do is allow the trojan to be installed and then on the next
> > reboot it pops up a message along the lines of "do you want
> > winservice32.exe to connect to the Internet".
>
> It might not even do that.

This is true :)

Jason

>
> Wolfgang
>
From:Wolfgang Kueter
Subject:Re: belkin gateway/firewall and zone alarm
Date:Sun, 23 Jan 2005 23:03:52 +0100
GavT wrote:

> Hi
> [...] I want to setup ZA free on 3 laptops and a PC to protect
> each from Trojans etc.

Neither ZA nor any other Personal Firewall protects from malware.

Wolfgang
   

Copyright © 2006 knowledge-database   -   All rights reserved