Chicken Little syndrome

[steveaubrey]

I may be worrying that the sky is falling, but I'd like to know what the experts think.

I have broadband access at home (cable modem, if that matters). I use no router or hardware firewall. I do use ZoneAlarm (both pro and free, on two different machines - switching the network cable between them - very cheap connection sharing).

My concern is outside access to my PC while my PC is powered off. I have been disconnecting the network cable to ensure no access by the outside world. Is this unrealistic?

I wonder because the network card in the connected PC still shows a green light when the PC is turned off. The card is getting some power from the network cable. I have heard rumblings about "wake-on-LAN" capabilities. I guess I don't want any bad guys (or even curious guys) to be able to turn on my PC remotely. I don't want them to re-flash the NIC. I would prefer that I remain invisible to pings or other methods, even when my PC is powered off.

Am I too paranoid? Are any of my concerns valid?

I know that the best-protected system is completely unplugged (power and network), but that's unusable.

I welcome advice, support, denials, and details. I will accept scorn, heckling, laughter, and psychiatric recommendations for my paranoia.

Thanks much,
Steve

 

[wybnormal]

Given the fact that normally when the PC is powered off, there wont be any LEDs lighting up, I would guess you are not being too parnoid. Personally, if you really want to share the connection and be "safe", get a firewall and be done with it. While the personal firewalls like ZoneControl are good, the dedicated box like Webramp or Sonicwall are a much better bet. No mess, no fuss. It's entirely possible to screw up the software fireall to where it thinks it's working but it's not. Or you dont catch that it's broken or..or..or.. The "black box" sitting on the floor by the cable modem is out of sight, out mind. It's always on.. doesnt care about Windows patch levels, games being installed, files being corrupted and so forth.

Just my opinion

MikeS
Find me at

http://www.packetattack.com

"Diplomacy; the art of saying 'nice doggie' till you can find a rock" Wynn Catlin

 

[MasterRacker]

I wouldn't worry about the light. In my environment that appears to be a function of the type of NIC in use. I have many that show a green light when off but plugged into an active port.

I suppose someone could use Wake On Lan to turn you on if they had your MAC address and a lot of other info, but I wouldn't worry about that. I'd go a little beyond Mike, in that I would recommend a dedicated box like he did but would also recommend ZoneAlarm on top of that.
Jeff
I haven't lost my mind - I know it's backed up on tape somewhere ....

 

[steveaubrey]

Gentlemen,

Thank you for the responses. My next step is checking on the hardware firewall. I already have ZoneAlarm in place, which adds a level of comfort, but a "belt and suspenders" attitude never hurt anybody.

Steve