Free software firewallFollow

Win 7 has a built in firewall, just make sure it's on. Heck, XP has a firewall, it's just off by default.

Microsoft Security Essentials is actually pretty good, it's just a lot less visible than people are used to.

As far as the router, assuming it is a router, it has a firewall. You might want to verify that it is a router if you did not specifically buy it. You're the one who was on the *********** of a campus network not too long ago correct? If so, you may be connected to a switch, which probably doesn't have a firewall.

But for the record, I run Norton 360.

A passive firewall is going to block specific incoming requests on certain ports. An active mode firewall inspects incoming packets in addition to just blocking what it would normally block. it probably slightly slows down your internet feed, but is also most likely more secure.

You always want a hardware and a software firewall. The built in windows 7 one is good if nothing else. I personally run Norton Internet Security, which is basically the same thing as Norton 360 with a different interface.

It depends on the firewall usually. Most routers will have outgoing traffic from your computer to outside open by default, and will automatically allow any traffic you request in on most ports. FOr ecample, when you click on a web page link, your computer sends out a HTTP get request over port 80, or possibly port 8080. The website then sends a reply on the same port saying "hey, you asked for packet xyz, here it is" THe router isn't smart enough generally to tell if packet xyz is a website, or a virus, and it doesn't know if you clicked on a link to deliver it, or some random popup add loaded on your computer and attempted to automatically trigger a download.

Generally the standard traffic ports will be somewhat open, and the less used ports will be somewhat closed on the router. Most of the UDP port range will generally be off, and most routers also stealth ports by default too, so they don't advertise to the world when ports exist and are open or not. Generally if someone can guess your IP address, they can generally guess which ports will be open on a given computer unless you go crazy remapping ports or implementing port forwarding schemes. realistical;ly the hassle of rebinding all the ports is more trouble than its worth.

I tried that and apparently my computer is more secure than Minas Tirith. Nice to know.


Thanks, Raolan.



EDIT: I mean I rated you up.. Why did I think this was the Feedback Forum?


Edited, Feb 16th 2012 7:28am by Bijou