What's a good firewall?

[MrEgo]

Hey everyone,

I maintain a few computers for my relatives.. the family computer guy, so to speak. Recently, two cousins of mine got hooked up to broadband - and the porn downloading has skyrocketed. I'm sure you've all seen this before. I foresee many reformats in the near future if I can't keep this under control, somewhat. I don't think talking to them will help much, either. They gotta have their porn, ya know?

Anyway, would a firewall help me out much here? Are there any brands recommended moreso than others? Keep in mind, I'm fairly new to networking and firewalls and all that. Thanks in advance for your help.

 

[Lemon law]

To MrEgo,

I not sure if its a myth that porn is the most dangerous things to download---but you better learn about overall security or get real good at reinstalling windows.

First---learn that a firewall won't protect you from something a user asked to download. But at the hardware firewall level built into a router will give you some protection with NAT--a little more with SPI----and quite a bit more with a software firewall---choose wisely on the software firewall--you can run one and only one active software firewall at at time.--For what its worth I use the sygate 5.5 firewall because its easy to use with networks.---but lots of good ones out there.

But a firewall is just one layer of security---and you probably need four of more for your curious cousins.

Your second defense better be a good active anti-virus software---again choose wisely---you can use one and only one on a given computer---I use avast---but quite a few are very good--be they free or paid.---but avast will stop a virus or a suspected virus as it tries to load---and give you a police siren as a bonus.

Your third defense layer should be a set of anti-spyware programs---highly recommended freebies are spybot and ad-aware---and quite a variety of freeware and paid programs exist.
These tend to be more passive---they scan and remove after infection. With others like spyware blaster preventing some from installing after they get through.

Also, your cousins should use Firefox or Opera rather than internet explorer for web browsing---because ie is far too reliant on active X controls. And keeping the OS fully patched almost goes without saying. And all your anti-malware programs must be kept updated with the latest definitions.

Your fourth layer should be some sort of process control---which alerts the user when malware that got through tries to install---I use win patrol---kinda minimalist. Far better protection can be found in system safety monitor or process guard---but the more aggressive ones can bug the bejus out of you when you install legitimate programs.---might slow your cousins down as a side benefit.

A fifth layer you might consider would be sandboxing programs---that run the porn on a virtual machine---and when its compromised you create a new one.

But what I write here just scratches the surface----go to spyware warrior forums---or castle cops for more information and recommendations. Lots of choices out there---and there is no need for my choices to be your choices---and while you are there---you can also learn about rouge programs not to install---that instead of protecting you--they will actually help load the mal-ware into a computer.

And once you bone up on security---and develop some plans--you better educate your cousins also--because the biggest security hole in a computer is a user stuck on stupid.--that downloads something that warns you in the fine print---and they don't bother to read what it will do---those folks get stuck with huge phone bills---or end up having their identities stolen.---or any number of bad outcomes.

 

[ITJunkie]

The above is excellent advice. :thumbsup:
I would only add that after your first complete hard drive reformat and once you have all the needed programs reinstalled, you image the drive using Acronis or Ghost (acronis is going to be a cheaper purchase).
This way you won't spend hours on the next rebuild but your cousins may lose files/email if not backed up prior to using the above stated imaging software.

 

[Pulsar]

#1 Zone Alarm is excellent for a free firewall program.
#2 AOL Antivirus is free and is the best anti-virus on the market (rebranded kaspersky).
#3 AVG Anti-Spyware is one of the best anti-spyware programs out there. It was originally Ewido but they were bought out. It is not free.

 

[JackMDS]

Freeware Security suit for Internet Connection Protection.

All of the above provides Very Good General Protection but would really Ban the capacity to visit porn and other unhealthy sites.

Therefore, I would add this.

Free Parental Control: Parental Filter - block porn.

And use Windows Host File for addtional parental Control: Windows Host File- What is it and How to Mange it?

Using this Host File, http://www.mvps.org/winhelp2002/hosts.zip

 

[nweaver]

number 1 should be NON ADMIN ACCOUNTS!!!

 

[wetcat007]

Firefox or Opera to help keep the spyware out obviously with the porn downloading.. lol Also a good antivirus http://www.free-av.com. Anyways, they will probably run into spyware/viruses as a problem, which they won't be protected by a firewall from. Normally I have a router, let NAT work as a firewall and call it good.

 

[blemoine]

you may want to Ghost the pc once you have reloaded it and have it like you want. that way instead of reloading all you have to do is re image the drive and you are good to go.

i am not saying not to follow all of the security advice. this is just a little extra info

 

[Brazen]

Originally posted by: Lemon law

And once you bone up on security---and develop some plans--you better educate your cousins also--because the biggest security hole in a computer is a user stuck on stupid.--that downloads something that warns you in the fine print---and they don't bother to read what it will do---those folks get stuck with huge phone bills---or end up having their identities stolen.---or any number of bad outcomes.

Haha, you said "bone up"

Also: :thumbsup:

 

[spikespiegal]

number 1 should be NON ADMIN ACCOUNTS!!!

Sorry, but that makes too much sense. We need to perpetuate the myth that Windows is a security mess, layer 4 and layer 7 OSI mean the same thing, and A+ certified noobs are qualified to talk about platform security.

Firewalls are not content filters, and the #1 security problem with home Windows machines is local admin rights - period. Take them away and all the other security concerns vanish and the billion dollar anti-spyware software industry ceases to exist.

Rootkits, Trojans, Malware etc. *cannot infect* a Windows box if the user does not have local admin rights.

 

[nweaver]

Originally posted by: spikespiegal

number 1 should be NON ADMIN ACCOUNTS!!!

Rootkits, Trojans, Malware etc. *cannot infect* a Windows box if the user does not have local admin rights.

WITHOUT A VULNERABILITY IN THE OS!!! so also turn on auto updates.

 

[dxpaap]

bump for later