increasing person security on the net

[Byte 2.0]

increasing person security on the net

Ok, here is my situation.

I may be protected enough.


Cable Modem---> Nic 1 on PC1 (PC 1 has 2 NICs)----WinRoute Pro(Nat Firewall)-----Nic2 (on PC 1)---->Switch.

From the Switch ---->PC2 (with Zone alarm 3.1) used for web surfing, chat, downloading.

From Switch ------> PC3---My small personal web server.


speical Notes---on PC1 in the Nat Firewall I have ports 21 and 80 directed to PC3.


Ok, Question time.

I know Nat is a Firewall on my PC1, But not sure how effective it is for protecting my main system. I was considering placing Zone Alarm on this system, but I don't see a way that i can allow traffic to come in on port 80 and 21. I believe Zone Alarm would prevent my server on PC3 from working correctly.

Maybe I need to consider another Firewall, but you see what I need it to be able to do.

I am listening to all advise.

Also, i know i could install it and just test it, but at the moment in time i am very busy and do not have the time to invest in experimenting for a few days.

[morriswindgate]

Can't hurt to put a software firewall on the machines, at least that way you can see what is trying to come in or go out.

[reboot]

You can put ZA on all machines, and simply allow server in ZA on the server machine to open up the ports you need.

[Byte 2.0]

I was looking for the option to open a few ports but I have not found that yet. If anyone can post the location to find that settign I will check it when i get home.

[reboot]

ZA won't open specifc ports. If you "Allow Server" for the program you want to run, it will open the right ports ONLY for that program. A different approach than a router, but still effective.

[Byte 2.0]

ok, i will give it a shot and allow winroute pro to act as a server and that may keep the correct ports open for my server on pc 3