Re: Firewall setup for 24/7 server

[Kim Wall <kim@xxxxxxxxxxxxxxxxxx>]

Pankaj Dhokia wrote:
> So really, there is no point in running ANY firewall software on ANY
PC
> on the LAN as the router should/will handle most attacks?

Until one of the PCs on the LAN is infected:  Perhaps an email trojan, a
"click here for dancing pigs" link, a laptop that spends half its
life
dialed-up directly, USB memory stick virus, or the friend's
nonspecifically crufty machine you've taken home for a backup-reinstall.

IPCop, and others, provide physically separate LAN interfaces which can
be used to reduce this risk (although they're generally set up to
protect your workstations from a potentially compromised server).

It's a matter of where the risks are.  Personally, I'd see a less
net-savvy family member opening email attachments as a far greater risk
than anything poking at a sensibly configured NAT router.

As they say, YMMV.


Kim.