Zanac
join:2009-05-20
|  Router firewall vs modem firewall
Does the WRT54GL router firewall offers more protection than the firewall on the Speedtouch 516? I want to use single-link MLPPP on one computer using Windows MLPPP because it's simpler this way. Should I use my router along with my modem or is it sufficient just to use the modem? I want my desk to be as clutter-free as possible. Thanks. |
|
pnjunction
Teksavvy Premium
Premium
join:2008-01-24
Toronto, ON
 ·TekSavvy Solutions..
1 edit | You've already got a WRT54GL? I don't see a reason to not use it. 'Simpler' doesn't have any inherent benefits in this case. You don't need to put it on your desk...
I'm no firewall expert, but modems don't have firewalls in bridge mode. If you connect with Windows your machine is exposed directly to the internet, so you're either trusting Windows firewall/security or you need more software. I think if you use a router you're protected by it as well as whatever protection your computer has. |
|
Guspaz
Guspaz
Premium,MVM
join:2001-11-05
Montreal, QC
·Colbanet
| reply to Zanac
As soon as you establish a PPPoE connection from a device, it bypasses any upstream firewalls because that device becomes your portal to the internet. In short, if you set up PPPoE on a Windows computer, that computer is connected directly to the internet, and your modem is doing zero routing/firewalling.
This is why we tend not to recommend that people establish PPPoE sessions directly from their Windows computers. If you do, make sure that the Windows firewall is enabled and well configured. And don't connect a Windows-based computer to the internet directly until it is *fully* patched. If you connect an unpatched Windows XP computer to the internet, it will be infected and zombified in less time than it takes to install patches (we're talking just a handful of minutes, single-digits here). |
|
TheGrub
join:2005-11-07
Canada | You already have a WRT54GL router... Use it with tomato firmware and no more hassle !!
Setup takes like 5 minutes and your done !
Security and simplicity ! |
|
Cloneman
join:2002-08-29
45436
| reply to Zanac
The majority of "firewalls" on home routers are basically saying nothing more than "you are not exposed directly to the internet". What this means is the internet does not see you, it sees your router.
This does not prevent browser infiltrations, existing on-system viruses from outbound communication, rogueware from reporting to big brother etc. etc.
As far as I know most routers do no not really have any "firewall" features worth mentioning (except port forwarding). The PRIMARY feature is security by assigning private IPs. Anything else (SPI or learning, filtering ICMP, etc. are really an oversight and not even worth mentioning as worthy security assets.)
Unless someone can correct me on this? Routers don't do much filtering or proactive defense.
This is not to say that routers do not secure you from the internet, all I'm trying to state is that they are not "magical boxes that filter out the bad stuff". And it's better that way... people who've dealt with windows software firewalls understand. |
|
Zanac
join:2009-05-20 | reply to Zanac
So, router firewall + software firewall = extra protection. I'll stick with this setup. Thanks for the replies. |
|
Inssomniak
Premium
join:2005-04-06
Cayuga, ON | Most consumer routers have a policy DENY on the forward chain, they just reject most anything inbound unless there is an established connection made from behind the router. |
|
