Windows XP Firewall 1

[jamccor]

I have 2 machines at home, both loaded with XP Pro. I have made them peer to peer machines via a workgroup. My question is, unless I disable the Internet firewall that comes with Windows XP, I cannot see the other machine. I use a linksys 4 port router with a cable modem. Do I really need to use the firewall at all? Thanks

 

[pechenegs]

Yes, you'll need a firewall for any connection to the internet especially a cable connection: a favourite for hackers to hijack for denial of server attacks! I would disable Xp pro's firewall and download a free ware like zonealarm pro or their freeware, Sygate 5, Tiny4 or Agnitum's outpost. All are pretty good software firewalls which can be checked out at

http://www.grc.com

using their leaktest and shields up software to make sure they are stealthing your computer or also at

http://www.pcflank.com

which can also check to make sure your computers are stealthed!

If you want a hardware firewall litebox does a free one but you'll need a computer to run it on and you'll have to configure it yourself, DNS, TCP/IP and DHCP etc! so better going for a software firewall!?

 

[pechenegs]

oops if it's a linksys firewall router no you won't !

 

[pechenegs]

Also, I just checked this article out on linksys , says for added security you can run zonealarm with it!

http://www.pcmag.com/article2/0,4149,650979,00.asp

 

[jamccor]

Thanks for the advice. So basically, If I use the firewall built into XP, I wont be able to access drives on my other computer??

 

[pechenegs]

i don't know about other drives but I would turn off Xp's firewall anyway and use your firewall router with the option of a better software firewall with it.

 

[jamccor]

Actually, The router I have is not a firewall router. Its a different model from linksys. I have a copy of Norton personal firewall. Will using this enable my drives to be seen?

 

[bcastner]

From Microsoft:

"You should not enable Internet Connection Firewall on virtual private networking (VPN) connections or on client computers because ICF will interfere with file and printer sharing. "

The intention of ICF was to protect either a single computer connected to the internet, or the "public" or internet connection side of a computer performing ICS services for other computers. It was not intended as a general client firewall for those behind a router, as it blocks several ports and protocols needed for your LAN to operate properly.

Yes, you could on each computer make entries to open the firewall. But my strongest recommendation to you is to use the free firewall products available from Zone Alarm, Sygate, Tiny, Kerio and others in place of the native XP ICF. And Microsoft agrees.

 

[jamccor]

That was exactly what I needed. Thanks for the post from Microsoft.

 

[NTesla]

Actually, in a way you do have a firewall router. What Linksys did was design their routers with NAT (Network Address Translation). This way you can use one public address to access the internet with several computers. When some one trys to 'sniff' your network they will not get past you public address. This makes your network very secure, although it is still possible for a hacker to get into your network, if he is good. You can go into your router and on the securtiy tab you can select to require users have zonealarm installed or they cannot get though to the internet. These routers are very nice I use one my self.

Also if you install one of the other firewall programs, it will almost instantly find your network and ask you if you want to allow traffic to enter your computer from this network. Of course you will want to say yes

 

[jamccor]

Does anyone have any good recomendations on a good firewall software package..free or store bought. Thanks for everyones good advice.

 

[bcastner]

Sygate Personal Firewall
Kerio Personal Firewall
Tiny Personal Firewall
BlackIce Defender
Zone Alarm (though they "hide" the free one on the site)

 

[jamccor]

Thanks for everyones help!! I ll try downloading a few of these and test them.

 

[pechenegs]

i wouldn't bother with black ice defender it failed

http://www.grc.com's

tests , unless they have improved their product. Agnitum's outpost firewall is good and uses a lot less resources than zonealarm. plus Agnitum can take plugins!