firewall questions

[EZ_Healo]

OK i have a few questions. first what is /DMZ? do I need to turn it on at all? If so do I need my primary computer plugged into it?

Ok now also what is it supposed to block. I still get pop-ups and spyware at the same rate before having it hooked up.

Third how do I know the firewall is even working on blocking things lol.

[EZ_Talius]

DMZ = De-militarized zone. If your computer is there, it's not protected by the firewall. If you move your comp in there you can do file tranfers you might otherwise be unable to do.
Don't go in there if you want protection
If you don't have any need for it, it doesn't have to be enabed.

[EZ_Gyorg]

a firewall doesn't block most popups and adware. Usually you consentually agree to download the software that does that. Adaware and Spy-Bot will take care of those.

[EZ_Yaramir]

So the de-militirized zone is most dangerous?

Gyorg, how do you know what/who and how much you can trust with this "free scan" stuff. I guess adaware is pretty trustworthy if everyone is referencing it, but nonetheless.

And whats the diff. between adaware and spy-bot?

[Mithrilhall]

Spybot will catch some stuff that Ad-aware will miss and Ad-aware will catch some stuff that Spybot will miss. Also...there's a difference in $$$. I think you have to pay for Ad-aware and Spybot is free.

[EZ_Yaramir]

Thx.
Not checking it atm, but I think Ad-aware has a freeware version, if that's any good.

[EZ_InvisiBill]

Yes, the DMZ is basically outside the firewall. It's made to provide full access. You should only use it as a last resort, or if you understand exactly how open it is.

Ad-Aware used to be the best. However, they totally shelved version 5 while they worked on 6. For months, they didn't have any updates. In that time, SpyBot came about. Since it's 100% free and dedicated to that idea, that's what I use. Both are only as good as the malware definitions (just like virus scanners), so make sure you keep whichever one you use updated.

Mozilla Firebird is smaller, faster, and more secure than IE, plus it strives for 100% standards-compliance. While there are occasional bugs, 99% of the time problems are due to crappy HTML. It includes a popup blocker, and isn't susceptible to all the auto-install crap that IE is.

[EZ_Yaramir]

I dont know. I kinda feel weird about using different browser. Windows likes IE. IE likes windows. How do they feel about Mozilla?

[Mithrilhall]

Firebird is by far the best browser out there. Between tabbed browsing, pop-up blocker, block images from this server, adBlock, and mouse-gestures there is no browser that comes close to it IMO.

Read about some of the extensions yourself www.texturizer.net/firebird/extensions/

[EZ_Bondori Zafiro]

Doesn't assigning the DMZ host just not offer firewall protection on that certain computer?

I switch DMZ host on my comp on and off, becuase the firewall on my linksys router prevents me from initiating an aim direct connect and the ability to host games.

Also, leaving the firewall on when using bittorrent decreases performances alot, since you can't download from other people with a firewall activated (I believe). I could be wrong though.

[EZ_Norpin]

"I dont know. I kinda feel weird about using different browser. Windows likes IE. IE likes windows. How do they feel about Mozilla?"

Seeing as Mozilla almost never freezes/crashes, I'd say Windows likes it just fine. Since switching to Mozilla I don't have to reboot anywhere near as often as when I used IE. Plus Mozilla doesn't have all the innate security risks that come with using an integrated browser like IE.

[EZ_InvisiBill]

Quote:Doesn't assigning the DMZ host just not offer firewall protection on that certain computer?

Yes, that's the point of it. That computer in the DMZ is 100% unprotected, the same as if it were plugged directly into the cable/DSL modem.

Quote:I switch DMZ host on my comp on and off, becuase the firewall on my linksys router prevents me from initiating an aim direct connect and the ability to host games.

Also, leaving the firewall on when using bittorrent decreases performances alot, since you can't download from other people with a firewall activated (I believe). I could be wrong though.

That's not really the firewall, that's port forwarding. Basically your router has one input (the internet) and # of outputs (however many PCs you have hooked up to it). When something makes a connection to your IP address (the router), the router has no idea what to do with the connection. You need to set up port forwarding to tell it that incoming connections on TCP ports 5000-5050 need to go to PC1, and incoming connections on ports 5051-5100 need to go to PC2 (or whatever the specific port numbers are). If it knows that the incoming connection on port 5037 is supposed to go to PC1, the connection will behave just like the router isn't even there.