Goodbye Dialup....Hello DSL

[TOMLESCOEQUIP]

I just ordered DSL service for my shop as it just now is becoming available in my area. My question is for those who have "always on " service such as DSL or cable modems, What type of firewall protection & anti virus will I need to upgrade to ?? What works the best for you ? What settings will I need to change (if any ) and what level of virus protection should I install ? I'm running windows XP home & have installed service pack 2 already. Thanks in advance.................Tom

 

[getut]

1) Do not rely on a software firewall such as BlackIce Defender or similar. They can be good backups in addition, but your first line of defense should be a good hardware firewall/NAT router. Linksys or DLink are good names (The linksys BEFSR41 is probably my best recommendation). Stay away from the Belkins (sometimes sold at Walmart). Don't let the phone companies installer give you a DSL modem connected by USB. Make sure it is an ethernet connected modem so you can use your hardware firewall with it.

2) Do away with Internet Explorer or any frontend based on IE that masquerades as an alternative browser. Use IE ONLY to go to Windows Update and get your security updates and software patches. Go with Firefox or Opera. Also, do not use Outlook Express or Outlook for the same reasons as above. There are currently security problems for these packages that are over 8 months old and still there is NO fix for the problem. ***Edit: Thunderbird or Eudora are good email software replacements.

3) Tell your installer that you want your PC configured with only standard configurations. Tell them you do NOT wanted any branded configurations. If the installer tries to put any CD's or diskettes in your PC, slap him upside the head.

4) Make SURE your PC is up to date and protected by the router/firewall and also up to date antivirus software BEFORE connecting it to the network. Current statistics show an unpatched PC connected via a broadband connections takes on average only 3 minutes to be compromised by malicious software.

5) Don't rely on your firewall to protect you. Firewalls ONLY protect against brute force attacks. You can still VERY easily be compromised by passive attacks coming in through trusted sources such as email and requiring you to click on something. Once your machine is compromised by the passive attack, the firewall does no good, because your PC connects outbound to the attacker. There is no inbound attack for the firewall to stop.

 

[hazmat]

I use a software firewall - zone alarm with Windows XP. I've heard that a hardware firewall (built into most routers) is better. But I defer to the professional geeks. Maybe surf around cnet

 

[techman]

Tom:

A great product (even free) is ZoneAlarm, from www.zonelabs.com I would use it even if you have a hardware firewall as mentioned. It provides inbound/outbound traffic monitoring and control, and has a simple user interface.

I also strongly agree that staying away from IE and using Firefox, for example (also free), reduces your vulnerability greatly.

For sure get a good antivirus. I use Norton Antivirus. Works quite well, and will automatically update itself regularly for the latest threats.

One more thing to check is in the networking settings. DSL usually hooks up through a network card (NIC). Go t the properties for that card after it is installed, using the Networking icom in the control panel. MAKE SURE that "Printer and File Sharing" is unchecked for that network card. Windows often defaults it to On, which will let outsiders share the contents of your hard drive.

paul

 

[Maxfli]

Router settings!!!

I limit the access to ethernet to only specific addresses in my linksys router. Typically the router is address 192.168.0.1. the router also acts as a Domain Name Server (DNS) meaning it assigns the ethernet addresses at start up. I think the default address range is 192.168.0.1 to 255. I have a few pc's sharing access, so I set the router to only allow a range like from 192.168.0.140 to 192.168.0.143. Then when you set up the PC's Ethernet (TCPIP) settings, turn off allowing the address to be set by the DNS and you hardcode each machine to specifically use 140, to 143. This is expecially important if you are using wireless pc attachs to ethernet. You know how there used to be Road rallies where you go from place to place looking for clues, I read an article about groups that go around in cars and cruise neighorhoods with a laptop and the winner for the night is the car that was able to access and disrupt the most household wireless networks.

Scary!!

 

[TOMLESCOEQUIP]

Sounds good so far.......it looks like I'll need my local computer geek to blueprint my system before the DSL install. My bro' inlaw in Florida was victim to one of the drive by wireless attacks.......his computer was trying to open about 75 IE windows at once & slowed down to zero response.......scarey that we have to deal with roaming geek squads now too...........Tom

 

[getut]

Mostly hogwash. Its called wardriving and it isn't nearly as malicious as it sounds. 99.99% of the time it is just geeks out mapping wireless networks for the fun of it. MAPPING.. not disrupting. The part of a percent of people left usually are driving around just looking for enough free access to send an email to work so the boss doesn't know the IT geek is out in the countryside playing golf rather than at that seminar. Don't ask me how I know this. /forums/images/graemlins/grin.gif

I'm a geek. You don't have to fear us unless we don't get our yearly raises for making your computers run. /forums/images/graemlins/grin.gif
We DON'T take down home users networks for giggles. heheh

 

[TOMLESCOEQUIP]

If I change web browsers is their an easy way to copy favorites to the new one or will I have to copy & paste each one? (The copy & paste could take awhile )

 

[TOMLESCOEQUIP]

<font color="blue">
3) Tell your installer that you want your PC configured with only standard configurations. Tell them you do NOT wanted any branded configurations. If the installer tries to put any CD's or diskettes in your PC, slap him upside the head. </font>........... I think I'm gonna be the installer.........They're just sending the DSL modem & filters as well as a "CD" ............Are you saying NOT to use the "CD" ??

 

[PineRidge]

Sounds to me like getut has given you some real good advice. And since he has admitted to being a geek he most likely knows a few tricks that the average guy doesn't even think about. If I was looking for this kind of info I would put a high value on the source and tighten up my system as best that I could.

You're going to love DSL. /forums/images/graemlins/grin.gif