Reply to thread

Message

<blockquote data-quote="Cr00zng" data-source="post: 1703569" data-attributes="member: 318059">Both the local and broadband firewalls have advantages, but...The firewall is a network layer protection, pretty much a gatekeeper of network traffic based on source/destination and port number or protocol. All of them are stateless nowadays, meaning that the initial, or first time seen connection is checked against the firewall rule base, and if the connection allowed, the reply and subsequent connections flow through without further evaluation against the firewall rule.Generally, both of the firewall types allow all outbound connection and protocols, while blocking all incoming connection request by default. Yes, it'll protect against direct attacks from the outside or the internet, but it will not block internal host's applications initiating a connection to the outside. This allows the end-user accessing the internet with any of the applications installed on the system. The any application includes malware on the system, if any; the firewall will not differentiate between the applications. In another word, the firewall will not prevent the &quot;hacked system&quot; calling home, or calling the command and control center, nor will the firewall block the responses to the &quot;calling home&quot; initiated connection.By no means I am saying that there's no use in activating the firewall, quite the opposite. The firewall does have its purpose in your layered security protection, just keep its limitations in mind.</blockquote>

[QUOTE="Cr00zng, post: 1703569, member: 318059"] Both the local and broadband firewalls have advantages, but... The firewall is a network layer protection, pretty much a gatekeeper of network traffic based on source/destination and port number or protocol. All of them are stateless nowadays, meaning that the initial, or first time seen connection is checked against the firewall rule base, and if the connection allowed, the reply and subsequent connections flow through without further evaluation against the firewall rule. Generally, both of the firewall types allow all outbound connection and protocols, while blocking all incoming connection request by default. Yes, it'll protect against direct attacks from the outside or the internet, but it will not block internal host's applications initiating a connection to the outside. This allows the end-user accessing the internet with any of the applications installed on the system. The any application includes malware on the system, if any; the firewall will not differentiate between the applications. In another word, the firewall will not prevent the "hacked system" calling home, or calling the command and control center, nor will the firewall block the responses to the "calling home" initiated connection. By no means I am saying that there's no use in activating the firewall, quite the opposite. The firewall does have its purpose in your layered security protection, just keep its limitations in mind. [/QUOTE]

Verification

Name this item 🌈