08-13-2003, 02:06 AM
I've used quite a few different firewalls, and whilst some people would say don't use software based ones... it's a bit inpractical for the average home user to setup and configure a linux-based firewall.
As far as a firewall screwing up your machine, I've only known one to do that... The rest just require a reasonable knowledge of configuration...
If you do go for a desktop firewall, make sure to get one that has Application-level security as well as rule-based. Thsi will enable specific applications to be allowed, along with anything that connects to say port 25 (SMtP).
Again, rules-based items are usually more advanced and would be something that a geek would tell you to insert somewhere.
I am actually using a mixture of Zone Alarm PRO and Kerio Personal Firewall. Zone Alarm, I use on the XP machine that's actually connect to the net, because I know the rules won't change that often. Kerio, I use on the laptop, because it's smaller, lighter, and easier to use with the rules changing so much.
At work, it's Firewall-1 on a Linux machine. Rarely has an issue, and has some pretty neat reporting that it can perform to check on things.
As far as a firewall screwing up your machine, I've only known one to do that... The rest just require a reasonable knowledge of configuration...
If you do go for a desktop firewall, make sure to get one that has Application-level security as well as rule-based. Thsi will enable specific applications to be allowed, along with anything that connects to say port 25 (SMtP).
Again, rules-based items are usually more advanced and would be something that a geek would tell you to insert somewhere.
I am actually using a mixture of Zone Alarm PRO and Kerio Personal Firewall. Zone Alarm, I use on the XP machine that's actually connect to the net, because I know the rules won't change that often. Kerio, I use on the laptop, because it's smaller, lighter, and easier to use with the rules changing so much.
At work, it's Firewall-1 on a Linux machine. Rarely has an issue, and has some pretty neat reporting that it can perform to check on things.