[Techtalk] Personal firewalls: helpful?

[Meryll Larkin]

6/6/05

Thanks Daneel,

You've stated most of what I was going to say, but I'm saying it anyway.

Yes, ultimately all firewalls are implemented in software, but they are
still talked about as "hardware" (as in a machine dedicated to being a
firewall) and "software" (as in some scripts that run in a computer that
does other things too).

The firewall is only as effective as what it targets.  One example of a
"hardware" firewall might be a router with programmable port policies.  Of
course, if you allow email in through that router and you have no software
to handle viruses coming in through email, you can get viruses.

There are some expensive "hardware" firewalls that are very programmable and
very effective (Watchguard Fireboxes), but unless you are running high risk
servers or trying to create virtual tunnels, you probably don't need them.

Most "personal" firewalls on Linux take the form of a programmable router
(less than $50 US) plus some kind of software scripts which can be as simple
as "hosts.deny" and "hosts.allow" plus "spamassassin" and some kind of
antivirus software if you are receiving email.  I have a list somewhere that
includes 
http://www.clamav.net/
http://www.grisoft.com
To name 2, but I don't know how effective either of them are.

Meryll Larkin