Re: Router selection? I'm a Computer and Internet/Newsgroup Newbie



In article <1156067024.910425.128140@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
"JenniferR" <redhed1829@xxxxxxxxx> wrote:

Paul wrote:
In article <1156057397.495223.42490@xxxxxxxxxxxxxxxxxxxxxxxxxxxx>,
Snipped LOTS of great information

Paul

I subscribed to the standard ADSL service.

Oplink advertises they do not use "PPPoE". (Unlike, SBC Yahoo.)

I believe the network protocal is TCP/IP for the the standard (I looked
at the modem set up instructions).

There is so many security options offered. What do I really Need?

Example: Security: Firewall: DoS Attacks Detection Logging, Dropped
Packet Log, Security Event Log, E-mail Log; VPN Functionality: NAT
traversal (VPN pass-through) for IPSec, PPTP, and L2TP VPNs

Or

Security: SPI Firewall, MAC Address Filtering

or
D-Link DI-808 HV
snipped
Security: Denial of Service (DoS) Protection; Stateful Packet
Inspection (SPI); Activities Logging; NAT; DMZ; Filtering (MAC, IP,
URL, Domain)
Standards: IEEE 802.3, IEEE 802.3u,IEEE 802.3x
Temperature: 41o to 131oF (5o to 55oC)
VPN: IPSec (40 IPSec Tunnels) IP Authentication Header (AH) IP
Encapsulating Security Payload (ESP) Internet Key Exchange (IKE)
authentication and Key Management Integrity (MD5 / SHA-1) NULL/DES/3DES
Encryption Algorithm Internet Security Association and Key Management
Protocol (ISAKMP) Main and Aggressive mode

Thanks For reminding me about NewEgg's site...I like the customer
comments.
After all this research, I just may become a hobbiest Computer Geek.

JenniferR

Like "Al" suggested, NAT is probably the biggest feature. It does
not have to include Stateful Packet Inspection, and if you aren't
running any servers, the port remapping feature of NAT is all you
need. If you don't do any port forwarding with the router, you
can scan yourself with one of the Internet port scanners, and
see if you are "visible" on the net.

VPN features are good if you work at home, and your employer insists
on a secure (encrypted) link between home and work. In a case
like that, you ask the IT staff at work first, what to buy, so
you get the right feature set. In some cases, the employer might
include some compatible networking equipment.

I won't use wireless at home, and then I don't lose any sleep
over what security features of wireless work and what ones
don't work. I guess I'll always be satisfied by a $29.95
router :-)

DMZ (demilitarized zone) basically is like port forwarding
all public port numbers, to one selected computer on your
LAN. That allows easy setup of game servers or other server
types, but then you lose the hiding features of NAT. It should
not take too long before someone figures out a way to hack
into the machine sitting in the DMZ. I have only used DMZ
for a few minutes, for debugging networking problems, and
this is not a feature I would use for too long, unless the
target machine had a read-only file system (like booting
a Knoppix boot CD).

Just about anything is going to meet the requirements. I'm sure
the marketing people at the routing box companies are gritting
their teeth right now :-)

I'd recommend the product I bought, but I see it is up to its
fourth hardware revision, and the reviews for the product
now suggest it sucks. So the comments on Newegg are very much
the right way to go to get recent feedback.

Paul
.



Relevant Pages

  • RE: VPN & Security Question
    ... Just one port: TCP Port 3389 ... I don't believe in using VPN to connect home/SOHO users because it's very ... difficult to know the status of their end of the connection. ... > VPN was a critical piece of security best practices, ...
    (microsoft.public.windows.terminal_services)
  • Re: BEFVP41 -2003 SBS Help Please
    ... Couple of things to keep in mind about exposed ports, VPN, and security ... + 1723 is authentication, it doesn't pass the data stream. ... 1723 is an authentication port, if someone authenticated, they get in. ...
    (microsoft.public.windows.server.sbs)
  • Re: Why use VPN?
    ... People are paranoid about the whole security thing. ... The VPN solution also ... Through a port. ...
    (microsoft.public.windows.terminal_services)
  • RE: [fw-wiz] terminal services
    ... IMHO, be better served to use a VPN to establish the connection, then tunnel ... > incoming traffic on that port to a specific IP on our internal network. ... > pointers to information hopefully in support of my fear of M$ security. ... personal Netscape Mail account today at ...
    (Firewall-Wizards)
  • Re: Reported Kazaa and Morpheus vulnerabilities
    ... I.E. being able to browse port 1214 is a FEATURE NOT A BUG. ... And in regards to security, to my knowledge no audit or major testing has ... Multiple long Host: headers ...
    (Vuln-Dev)