Hi, I'm using two PCs running XP and Ubuntu behind a DSL router with a
built-in hardware firewall.
Assuming that I'm not really worried about firewalling the Ubuntu
machine, should I:
* turn on hardware AND software firewalls?
* use the router's firewall but turn off the XP firewall?
* only use the XP firewall?
In other words, is it detrimental or beneficial to use XP's and the
router's firewalls simultaneously?
Thanks!

Read more of it in this link:
http://www.lockergnome.com/nexus/win...ke-a-firewall/
--
By rating a post as an answer or helpful, you help others find the answer
more quickly.


"Karl Self" wrote:

> Hi, I'm using two PCs running XP and Ubuntu behind a DSL router with a
> built-in hardware firewall.
> Assuming that I'm not really worried about firewalling the Ubuntu
> machine, should I:
> * turn on hardware AND software firewalls?
> * use the router's firewall but turn off the XP firewall?
> * only use the XP firewall?
> In other words, is it detrimental or beneficial to use XP's and the
> router's firewalls simultaneously?
> Thanks!
>
>

Karl Self wrote:
> Hi, I'm using two PCs running XP and Ubuntu behind a DSL router with a
> built-in hardware firewall.
> Assuming that I'm not really worried about firewalling the Ubuntu
> machine,


Why not? Linux distros are subject to attacks and exploits, as well,
you know.


> should I:
> * turn on hardware AND software firewalls?


Layered defense is a standard recommended security precaution.


> * use the router's firewall but turn off the XP firewall?


Does the router have true firewall capability, or does it just use
Network Address Translation (NAT) to "hide" the PCs' IP addresses?


> * only use the XP firewall?


I wouldn't.


> In other words, is it detrimental or beneficial to use XP's and the
> router's firewalls simultaneously?

Neither, really.

If you use a router with NAT, it's still a very good idea to use a
3rd party software firewall. Like WinXP's built-in firewall,
NAT-capable routers do nothing to protect the user from him/herself (or
any "curious," over-confident teenagers in the home). Again -- and I
cannot emphasize this enough -- almost all spyware and many Trojans and
worms are downloaded and installed deliberately (albeit unknowingly) by
the user. So a software firewall, such as Sygate or ZoneAlarm, that can
detect and warn the user of unauthorized out-going traffic is an
important element of protecting one's privacy and security, alerting you
to an unwanted malware application's activity. (Remember: Most antivirus
applications do not even scan for or protect you from adware/spyware,
because, after all, you've installed them yourself, so you must want
them there, right?)

I use both a router with NAT and Sygate Personal Firewall, even
though I generally know better than to install scumware. When it
comes to computer security and protecting my privacy, I prefer the old
"belt and suspenders" approach. In the professional IT community,
this is also known as a "layered defense." Basically, it comes down
to never, ever "putting all of your eggs in one basket."


--

Bruce Chambers

Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html

They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety. -Benjamin Franklin

Many people would rather die than think; in fact, most do. -Bertrand Russell

Excellent answers, thanks Bruce and Rey!