[MLB-WIRELESS] Firewall rule?

Jesse McNelis jessta at gmail.com
Tue Aug 15 19:04:59 EST 2006


On 8/15/06, Mark Aitken <nodegxt at yahoo.com.au> wrote:
> Hi Ppl,
>
> as most of us do, I run a firewall on all computers connected to my
> network.  I have recently installed Tiny Personal Firewall on my Win2K
> server
> box that is online on the net 24/7.  This does mainly torrent xfers.
>
> After the inital setting up of firewall rules, kernel/services/virus
> software/torrent engine/and so forth, I get daily incoming requests for
> ICMP packet
> permit/deny.  I know this is basically used to probe a system for things
> like open ports/ping etc.  Now what I need to know, is it quite ok to
> deny all requests
> for the ICMP packet range? Will it harm any other services that I have
> running?
>
> Thanks for assistance
>
> MArk
>
> VK3JMA/NodeGXT
>
>
> _______________________________________________
> Melbwireless mailing list
> Melbwireless at wireless.org.au
> http://wireless.org.au/mailman/listinfo/melbwireless


>  Now what I need to know, is it quite ok to
> deny all requests
> for the ICMP packet range? Will it harm any other services that I have
> running?
Generally it's not a problem. Just remember that you've done it. The
most frustrating thing is trying to get two computers to talk over a
wireless networking. Using ping to test the connection and not getting
replies and not being able to work out why.

I still don't really get the large mainstream use of personal software
firewalls. They really don't make much sense, waste resources and
create another process running with adminstrator privileges that could
be expolitable. It seems simpler to disabled the network services that
you aren't using.

Firewalls are for dividing networks up and that's what they should be
used for. But It's your network so you should do what you think is
best.

-- 
=====================
Dairy!* is back @ http://jessta.homelinux.net
Running on the Wonderful Gentoo GNU/Linux
Blog: http://jesstaa.blogspot.com
Melbourne Wireless Node: GNE



More information about the Melbwireless mailing list