"~BD~" <> writes:
> My thanks to 'Unruh' for his/her comments.
>
> Maybe I have misunderstood - but I thought that a NAT router provided a
> complete barrier between a computer and the Internet - a hardware firewall.
>
> You seem to suggest that a software firewall is needed too. Is that
> correct?
Hi BD,
The only thing that provides a complete barrier between your computer
and the internet is a scissors... to cut the connection physically.
While a hardware firewall does a rather good job of thwarting network
based attacks from the Internet into your network, it doesn't
completely protect you by any means.
A hardware firewall allows outbound traffic to the websites you view.
Websites containing code that exploits browser vulnerabilities are
among the threats a hardware firewall doesn't solve. Avoiding use
of Internet Explorer, using Firefox perhaps with the NoScript and
FlashBlock extensions are among some of the things you can do to make
that activity safer, as well as using signature and behavioral
analysis anti-malware software on the client side (i.e. your Windows
machine).
To be even safer, do your browsing in a virtual machine running
something other than Windows, and roll that virtual machine back every
hour or so to a known state.
The value of a host based firewall is debateable in your environment.
They're a useful thing to have however when a mobile computer is
joining hostile networks (think wireless hotspots) though.
Hope this helps some.
Best Regards,
--
Todd H.
http://www.toddh.net/