Firewall

[Smoker]

Greetings

So I am thinking that since my system is gbpvr dedicated that I do not need an high end firewall. I was thinking that really I only need to block everything except for port 80 (for weather and EPG updates) and whatever I configure for web admin (EWA in the near future).

So I'm thinking that the XP Pro built in firewall would be sufficient.
Your thoughts ?

[elite]

I don't run a firewall at all on the pvr box (is sat behind a locked down router though...

[FirstTeamOPS]

If you're behind a router (a decent one) you really don't need to firewall your computers unless you want to see/control what's traffic is going in and out of the PC. If you want control, then don't use Windows Firewall.

If it's been awhile since I used the Windows Firewall, but I don't think you need to open exceptions for outgoing traffic (EPG updates). You will need to open exceptions for incoming traffic such as EWA on both your router and WinFW. EWA's ports are 7647 (EWA) and 7648 (streaming video, optional).

[taz]

I run the free version of ZoneAlarm on my GBPVR box.

[Smoker]

What do you consider to be a good router ? I've got a linksys

[blizard]

Greetings

So I am thinking that since my system is gbpvr dedicated that I do not need an high end firewall. I was thinking that really I only need to block everything except for port 80 (for weather and EPG updates) and whatever I configure for web admin (EWA in the near future).

So I'm thinking that the XP Pro built in firewall would be sufficient.
Your thoughts ?

From my basic knowledge about firewall, and especially Windows Firewall (WF), you will need only to open those port that you can't access from within your own computer (outbound traffic). When you first have made a "call" out (application send a request to internet server) that port is essentially open until your refresh your internet connection (this can be done in different ways depending on ISP and how hardware are set up with protocols like TCP/IP). Port 80 and some other ports are standard port for internet connection and can not be closed (=no response from any server outside your network would be possible).

That is why trojan are so dangerous while they get inside your network (=computer) they can then make a "call" and open that way a port to outside which in turn make it possible to access your computer. That is also why I would say that even a dedicated PVR would be better of with a basic firewall then without. After all it doesn't take much power to have WF running in the background and it will protect you as long you don't go to sites that might make you download anything without your knowledge. (That is also why you need to have some kind of basic antivirus if you really don't want to give access to your recordings or make it possible to over ride your firewall setting with help of trojans.)

Command to use for checking your connection in command prompt start>run: cmd in windows XP. NETSTAT -a ("-a" switch to control this command which will let you see all established connection; NETSTAT /? will let you see more option/switches and IPCONFIG will let you control your NIC card) and some other command I can not remember right now are easy to use tool to check for how many port that you are connected to right now.

Disconnect you NIC (LAN connection) for some minutes and re-connect and you will see that some connection are flushed which proof that you must ALWAYS take the first action to access contact (ports) to outside world when you are behind a firewall.

To make your EWA more secure you should pick other port numbers (check which range that are possible on the web as some are reserved for special purposes) and that way make it harder for ppl that don't spoof your ports to guess what port that you have open to access EWA. You can also keep EWA safe with a password and a user name so nobody else can access your configuration or change setting.

Better be safe, then sorry! :p

[David]

What do you consider to be a good router ? I've got a linksys

I have D-link, Netgear and Linksys routers and a few other knock off brands. They each have their pro's and con's. I have a tendancy to like the Linksys features and have more Linksys routers than the others. My primary router is a high end Linksys VPN router (RV082) which I like very much.

Some of my no-name brands and a few of my Linksys routers have died over the years. I can't recall any of the D-link or Netgear routers failing.

[FirstTeamOPS]

What do you consider to be a good router ? I've got a linksys

Most name brand ones will work just fine. I did have a Wireless Linksys that couldn't handle DoS attacks and it kept locking up. The Linksys WRT54G/GL/GS is an exceptional line of routers.

[Smoker]

no no no I'm not asking which is a good router in general but in the context of this thread and how being behind "a decent one" helps.

I have a linksys and yes it's a "good router".

[FirstTeamOPS]

I consider a decent router one that will keep and handle bad traffic (viruses, trojans, DoS attacks, etc). If it can't do that, then it's completely useless. In context of your first post, if you have a decent router, for most users, you won't need to use an additional firewall on each PC connected to that router.