Hardware vs software firewalls

Lebowski · Joined: Jul 18, 2008 Posts: 3

Hello,

I have a question regarding hardware vs software firewalls. Basically, some applications do not work with my router, so I want to get rid of it & use ZoneAlarm Free, for example. Is that a good idea? I mean, I feel safe when I'm behind a router. Okay, what I'm really asking you is.. Will I be "h-ckable" more easily when using a software firewall?

Thank you! Smile

Baby_Tux · Joined: Mar 06, 2007 Posts: 808

Lebowski wrote:

Hello,

I have a question regarding hardware vs software firewalls. Basically, some applications do not work with my router, so I want to get rid of it & use ZoneAlarm Free, for example. Is that a good idea? I mean, I feel safe when I'm behind a router. Okay, what I'm really asking you is.. Will I be "h-ckable" more easily when using a software firewall?

Thank you! Smile

First, what do you mean by "some applications do not work with my router"? (& what APPS) - if they are being blocked, just set it up correctly. MOST issues as such are configuration.

Best is BOTH - followed by HARDWARE - then SOFTWARE - NEVER, NONE.
The only time a software only firewall is used is for dial-up, as how are you going to put in a hardware one? - The hardware one protects your entire network (& adds some other benefits for the network) whereas the software one only protects the machine it is on.

Hardware IS a bit harder to hack, but if a CRACKER (criminal hacker) is determined enough, there is NOTHING that will stop them. You can ONLY slow them down. Thus the idea of more than one firewall. They get though one & hit the other.

Bottom line: I would never recommend connecting directly (physically) to broadband. Use a router (or such) with a built in firewall...

Lebowski · Joined: Jul 18, 2008 Posts: 3

Thanks for the answer! Smile

Well, my routers firewall is set up properly (or so I think). In a few words, it doesn't allow incoming traffic. Well, lets say I want to play SA:MP (San Andreas Multiplayer). And since there are quite a few servers available, I switch them quite often. But if I join one & later on I want to connect to another one, it says the server is not responding. Then I have to wait for the router to drop the connection to the previous server, and then I can connect to a new server. It gets fixed if I forward the required ports, but technically I shouldn't need to, right? So this is what I meant with some applications not working properly.

Baby_Tux · Joined: Mar 06, 2007 Posts: 808

It all depends on the site & how they have it set up. If they are using a NON-STANDARD port then yes, you will have to do a port forwarding. This applies to ZA as well, so even if you DID switch, there would be the same issue.

But the dropping & reconnecting you mention has me puzzled, as it SHOULD be a GO - NO GO situation. In other word, if it isn't forwarded & needs to be, it won't connect until you do. If your setup isn't working in this manner, then I suspect either your router / ZA isn't setup correctly or you have an issue with the router.

BTW: whatever forwarding you do in one, has to be done in both to work right.

ALSO: what are the port numbers you are entering for your "FIX"?

goretsky

Hello,

While there is some overlap between what firewall functionality in a residential gateway (router) and the firewall software one runs on a PC, they do perform some seperate--but complementary--activities, so it is a good idea to use both.

Have you checked with your residential gateway manufacturer to see if they have released new software for the device which fixes the incompatibility with the software you are trying to use with it?

Regards,

Aryeh Goretsky

Lebowski · Joined: Jul 18, 2008 Posts: 3

Thanks for the answers, you guys! Smile

Baby_Tux, it depends on the server that I want to play on. (but the standard one, I think, is 7777)
goretsky, I'm already running the latest firmware. And it's not an incompatibility with that specific application. It happens with *all* multiplayer games.

Baby_Tux · Joined: Mar 06, 2007 Posts: 808

That port number is NOT a standard number so it WILL need to be forwarded. ALL such sites that use that port SHOULD work from then on.

There SHOULD be some info from the site as to what ports need to be forwarded in order to work right, too & you will need there actual port number(s) plus whether they are UDP, TCP or such.

As an example: in Ham Radio, there is a program called ECHOLINK that needs this. IF you don't set it up, the program RUNS but it won't connect to the servers. It requires the following:

Basic Information

EchoLink requires that your router or firewall allow inbound and outbound UDP to ports 5198 and 5199, and outbound TCP to port 5200. If you are using a home-network router, you will also need to configure the router to "forward" UDP ports 5198 and 5199 to the PC on which EchoLink is running.

So you see, it is really NOT so cut & dry. BUT with the proper info IS easily done.