Cable router selection help....

[donpedro]

Now ... let's talk off topic

I am about to get Cable (DSL) Router. Here is what I have. Cable (non-static IP) modem connection, 1 PC WinXP, 1 laptop Win2000 (not planing more). I use it for work (VPN) occasionally.

And here are my questions.

1. What is advantage of "Built-in Firewall" against regular (I guess sofware) and how do I know that they mean NOT-sofware firewall ?

2. I have two candidates.

A-$39 Siemens SpeesStream 2-Port DSL/Cable Router with Built-in Firewall (SS2602) (Standards IEEE 802.3, 802.3u; VPN Tunneling via L2PTP, PPTP and IPSec pass-though)

B-$65 Linksys EtherFats Cable/DSL Router with 4-Port Switch (BEFSR41 ver. 2) (Standards IEEE 802.3, 802.3u; Build-in NAT Firewall; Supports UPnP; VPN IPSec and PPTP pass-trough)

Any sugestions which one is better ?

[noobee]

1. with hardware-based firewall, it's "install and forget". you don't have to worry what happens if the PC running your software-based firewall crashes or gets a virus. also, with software-based firewall, you have to leave your firewall PC turned on even if you only want to connect using your laptop. you might also need a switch/hub, or at the very least, a second ethernet card.

2. i have the linksys firewall, don't know about the siemens. i like the linksys, mainly because it is really convenient, not fudging needed. plug it in and it justs works. the new wireless router looks pretty nice because it has both wireless and ethernet connections. get a wireless pccard and you can read this forum on your laptop from your bathroom

[sterno]

When they say "built-in firewall" they mean that the box has a firewall to block incoming connection attempts before they reach your internal network, usually you can configure exceptions to that as needed. A seperate (software) firewall would have to be installed and configured on each machine on your internal network. Pretty much all of these little router boxes have one built-in.

I don't know about the Siemens router, but I have a Linksys that works well. There have been security issues with some routers (including Linksys), mostly related to flaws in the administrative web interface. Usually they're only problems if you configure the router to allow outside access to the administration interface, which is just a bad idea in general. Linksys has been good about releasing firmware patches (which are very easy to install) quickly, probably most of the other vendors have too - these are networking companies, not Microsoft, so they fix problems instead of trying to discredit the people who found them.

[donpedro]

I have one Ethernet card on PC and one on Laptop. Am I going to need another one ? Wireless is too expensive (I would need it only ones or twice per day for that ... ehm... )

Thanks.

[noobee]

if you use software-based firewall, or interconnect connection sharing on the xp, you would minimally need a second ethernet card on PC.

DSL----ETH-PC-ETH-----LAPTOP

your PC is thus the "firewall".

with hardware-based firewall, the connection looks like this

DSL-----LINKSYS------PC
               ------LAPTOP
               ------ (3rd PC)
               ------ (4th PC)

the LINKSYS is thus the "firewall".

[donpedro]

Hmm.... nobee, is it true even if you use router without build in firewall (software firewall on each PC) ?

BTW... here are links

SIEMENS SpeedStream 2-Port DSL/Cable Router

LINKSYS EtherFast® Cable/DSL Router with 4-Port Switch

[noobee]

hi

that's true. the function of "routing" is separate from the function of "firewalling"

routing, or specifically in this case, NAT (network address translation) allows more than one computer to share a single IP address to the outside world.

firewalling essentially is sophisticated network filtering to prevent malicous network traffic from entering into your internal network.

so it is possible to set up routing withOUT firewall, ALTHOUGH, most routers you see in the market that share internet connection also perform the firewall function. herein lies the difference between the different products.

the lowest cost solution is to get a second ethernet card, plug it into your PC and get a crossover cable from the PC ethernet card to the laptop. then set up internet connection sharing on your xp. xp also has basic firewall support, and i think it is quite basic. NOTE that the ethernet cable from PC to laptop is different from SWITCH to laptop (the 1st is called a crossover cable, the 2nd is a regular cable).

personally, i would go for the linksys simply because it saves the hassle to install stuff and avoids having to keep the PC on to connect the laptop to the internet.

[donpedro]

I might choose Linksys. Their web and support looks better... Let's see if there will be more posts to this discussion.

[sterno]

If you do decide to go with the Linksys check for sales and mail-in rebates at your local retail stores. I think I've seen it at around $50 recently.

[donpedro]

Does anybody know some good web site (like this ) that can help me with setting up of firewall and what-is-what in firewall arena ?