using 2 firewalls is just stupid. i mean you're going to have the same rules for each aren't you, allow the same progs to access the interweb, so what the hell's the point. I know people who swear by this silly habit, they are q q wrong.
now hardware & software f''wall combo, that's a different kettle of fish. In fact there is no sware v hware argument, they complement each other. I'll keep this simple.
you're familiar with sware fwalls. a piece of sware you add onto your os and apps to control net access, generally fairly easy to configure and use, but subject to going tits-up occasionally, can be gotten around, and can be demanding on sys resources.
hware fwall is part of a networking hware package such as a decent router. basically denies all in/out access at hardware level unless specifically allowed by the configuration (which you control) can be very powerful, in fact too powerful and can also be a bugger for novices to set up.
so it works out like this
sware fwall - easy to set up and use but can be unreliable, demanding and irksome
hware fwall - hard to set up and use but much more secure and once set you can leave it alone
mix the two. Aren't you going for that wireless LAN now, or did Mrs Ed kybosh it in the end?
here's an interesting article in
TechRepublic that discusses this very issue.
Also at
AntiOnline
..fold your hands child, you walk like a peasant..
Edited by - Tawakalna on 6/4/2004 11:17:42 AM