Ask LJ: Firewalls

[coraa]

Firewalls!

The subscription to Trend Micro PC-cilin that came with my laptop just ran out, and I'm looking at other firewall options for my laptop. I tried the ZoneAlarm free firewall, and it seems to work pretty well... except that, when I'm on my desktop, it won't let me access my laptop via 'my network places' anymore. And the free version of ZoneAlarm doesn't give me any way to tell it 'yes, attempts to access this laptop from that computer are legit and should be allowed.' Since copying files over from the desktop via web folders/network places is a major part of my file synchronization/backup process, this isn't a feasible situation.

Then I wonder whether just using the router's firewall (I know it has one, because Pav has done some fiddling with its configuration) would be sufficient.

So, because LJ Is My Decision-Making Process, a poll:

[Poll #1176173]

Also, and this is for comments, do you like what you use? Would you recommend it? Or does it annoy you?

(I'm actually not irritated at all, but the icon was too appropriate not to use...)

Comments

[coraa.livejournal.com]

Right, I wouldn't be comfortable running without a firewall. It's just a question of whether the router's firewall is good enough, and if not, which one to use.

[theinated.livejournal.com]

Most routers will generally only protect from incoming connection attempts. Which is fine for protecting you from external attacks, but it doesn't protect you from rogue software/plugins/websites/etc which are running on your computer, which wil generally make outgoing connection attempts to download moar zombie parts and turn your machine into an infested frankenzoo of viral spam regurgitation and denial of service attacks, which can cause your ISP to cut your ass off, and do fsmknowswhat to your machine and data.

Which is why the software firewalls on the Windows PC are still essential even when used in conjunction with a network firewall. They let you know when suspicious applications start getting up in your grill so you can exterminate annihilate destroy.

[ceph.livejournal.com]

Aw, you're so CUTE in paranoid-network-admin mode! ::pats you on the head::

[sithjawa.livejournal.com]

How does a firewall protect you from rogue software? Do software firewalls block outgoing requests?

Your second paragraph suggests that they *log* outgoing requests or otherwise provide notification. What firewall does this? (Have I had this capability all along and not known it??)