Question for dmsmed!

[SP33D PHR33K]

I have the single port Linksys router. Is it good enough protection from unauthorized network traffic? I know it doesn't do stateful packet inspection, but it drops all invalid packets via NAT, right?

[dmsmed]

I'd be lying to you if I told you how the Linksys router filters packets. I'm still in my first semester (CCNA). I'm going to have to refer this question to C.M. Weaver.

What I can tell you is make sure you disable ping responces on your modem. This will prevent your router from returning a ping from an outside intruder which tells him you are there. Do this via Advanced/Block WAN Requests/enable. This will pretty much make you invisible to the outside world. I haven't had anyone get past the router, but there is always a first time for everything. It would make my blood boil watching someone try to break into my computer. All in all I think I have been more satisfied with my router than any other computer component I have purchased.

[dmsmed]

Yoo-hoo, C.M. Weaver, any thoughts?

[C.M. Weaver]

The Linksys 1 and 4 port router where never designed to be a replacement for a good software firewall.

Because of the way NAT operates it will drop packets when it has no entry in it's table for the originating nodes request. If a node on the internal network has done a ping to a remote node the router will allow it, otherwise it is blocked. Remember when someone tries to ping you it's only to your router, as long as you don't have remote access enable there isn't much they can do to you. Besides an ICMP echo reply only lets the requesting node know there an active connection at the other end.

To ensure the best possible protection I would suggest adding a good software fire wall such as ZoneAlarm or ZoneAlarm Pro. I have used Conseal PC Firewall, Symantec Personal Firewall and BlackICE and have found ZA to be an excellent offering and very user friendly. BlackICE is notorious for false alarms and Conseal PC Firewall is not for the average home user as it requires a solid understanding of TCP/IP.

You should be safe enough for the average home user as long as you supplement the router with a good software firewall.

C.M.