[djw2009913]

Do i need zonealarm with a router that has SPI and NAT, Dos atack detection and logging, dropped packet log? I have tried shutting down zonealarm and running shields up. Everything was stealthed except 113 so i forwarded it to nowhere and now that is stealthed too. Zonealarm claims it has blocked 168 access attempts, but that could just be in error from something the computers on my network were trying to do. So keep zonealarm or toss it? Thanks in advance.

[Advertisements]

if it aint broke don't fix it. i say as long as zonealarm isnt messing anything else up leave it where it is. never hurts to have a couple extra sets of eyes on the wire.

[dsenette]

if it aint broke don't fix it. i say as long as zonealarm isnt messing anything else up leave it where it is. never hurts to have a couple extra sets of eyes on the wire.

[-=jonnyrotten=-]

The main thing that ZoneAlarm is going to help you with is if you have some form of malware on your pc that is trying to connect out then it will tell you that something is trying to connect out. Now as for the router as far as I know they do not block outgoing connections, just incoming. Now if something does somehow get through the router's firewall you still have a software one blocking. Not a bad idea to leave it on.

-=jonnyrotten=-

[dsenette]

jonny, depending on the router and the configuration thereof any and all traffic can be blocked, incoming and outgoing. though on most devices this requires an intimate knowledge of ACLs. which suck.

[-=jonnyrotten=-]

Hey thanks I was really only referring to "default" settings. You are correct you can block all traffic if so desired. ACL's aren't fun..

-=jonnyrotten=-

[djw2009913]

Thanks for ur replies, i checked out www.grc.com and used their port scanner to scan my ports w/ zonealarm off, and (with or without zonelarm) every port was stealthed except 113 so i set up my router to forwarde that port an ip address that wasnt on my network. So now all ports are stealthed, and as you and the site reccomended im using zonealarm to protect outgoing connections. But, i decided to disable the firewall part of zonealarm becuase it was preventing some connections from my computer to my router when it tried to find the computer names and other information. I suppose i could leave it on and allow that port, but would it affect performance at all?

Edited by djw2009913, 13 June 2005 - 04:53 PM.