Firewall Guide

From RezOvation Wiki

(Redirected from Firewall FAQ)
Jump to: navigation, search

This article provides a general overview on firewall configurations and uses.

Contents

Firewalls and RezOvation

Firewall configuration guides

How do firewalls work?

  • Firewalls regulate traffic between the Internet and a network or PC(s) behind the firewall
  • Firewalls also filter information between the Internet and a network or PC(s)
    • Filters can be set to block ports, Internet addresses (IP), computers, and applications from sending or receiving information from the Internet
  • Firewalls use various methods to control network traffic which include:
    • Packet Filtering
    • Proxy Service
    • Stateful Packet Inspection (SPI)
  • Protection against various network related attacks may include:
    • Remote Login
    • Application backdoors
    • SMTP hijacking (spamming)
    • Operating System security flaw
    • Denial of Service –(DOS) attacks
    • Email bombs
    • Macros
    • Viruses
    • Spam
    • Redirect bombs
    • Source Routing

Types of Firewalls

Hardware firewalls

  • Features:
    • Physical device that sits between your modem (Internet Connection) and your PC(s) or network.
    • Stand-alone product
      • Most modern broadband routers also have a built-in firewall
    • Hardware firewalls are ussually effective with little to no configuration
    • Hardware firewalls use packet filtering to examine packets to determine the source and destination
    • Prevent attacks from external souce by hiding
      • Uses Network Address Translation (NAT) for
  • Issues:
    • Most hardware firewalls treat outbound traffic from local network as safe
      • Infected local PC(s) sending information out is not blocked

Software firewalls

  • Features:
    • Sometimes referred as a personal firewall , internet security suites
    • Software Firewalls are applications installed on individual PC(s) to control and direct network traffic between PC(s). This traffic includes connections to and from the Internet as well as the local network.
    • Prevent network traffic from locally installed applications
    • Provide alerts to users about any outbound connection attempts made by applications and services running.
    • Provide information to user on applications attempting to connect or communicate to the network
    • Shield PC(s) from port scans and other attacks by denying or not responding to unsolicited network traffic
    • Monitors incoming and outgoing Internet traffic
  • Issues:
    • Software firewalls increases system resources
    • Virus, spyware, malware attacks on firewall applications can render Firewall configurations useless
    • Improper configurations may prevent authorized applications from performing correctly

Notes

  • Properly configured firewalls are used to prevent unauthorized intrusion to the network/ PC(s)
  • Improperly configured firewalls can lead to a compromised network and often times can disrupt authorized programs from functioning properly
  • Best practice to establish maximum security and effectiveness is to use both hardware and software firewalls
  • Many other Anti-virus, anti-spyware applications have firewall software already enabled
  • It is not recommended that you use multiple firewalls on the same computer, as this will often cause conflicts. Disable all but one software firewalls per PC.
  • Only firewalls that are correctly configured should be used
Personal tools