I've heard that it does. What do you guys think? If not, what kind of firewall should I employ?

Thanks again.

Yes ... but

I'm sure no expert and you can't go to the bank on my advise, but I can tell you that while there are firewall capabilities within a wireless router, they might not meet all your needs ...

Here's a link that offers more info on the topic ... hope it helps ...

http://www.firewallguide.com 

No. It would have software with it to "enhance" the router. A wireless actually opens one up to a whole different set of circumstances than just pop-ups! Security is paramount and from what I've seen in my own neighborhood...not too many people realize just how wide open their wireless connections are.

Look into Norton Firewall software.

these are my computer fixes. some are free, some cost.

ad aware

registry mechanic

rsystem cleaner

no trace

spy sweeper

spy bot

and of course zone alarm.

i don't know why a wireless router would serve as a popup blocker or a firewall. it seems it just allows more then one computer to access you modem or dsl

If setup properly, a router will serve as an adequate home firewall. Foward the ports you need to your PC, then block the rest.

The fact that's it's wireless opens up a whole new can of worms though. I've done my research via wardriving and it's amazing what people can geather and snoop over a wireless network.

Your router acts as basic firewall because that's the only IP address that is exposed to the internet. The router creates a LAN of which your pc is a member. Typically your router will have 2 IP addresses one that is used to communicate with the internet and one that is used on the LAN that it creates. Open a DOS prompt and run this command: C:\ipconfig /all You will see what I mean.

It is a BASIC firewall, IMHO you should also be running a software firewall; IE ZoneAlarm, Black Ice or something along those lines.

A wireless router is very vulnerable the same way your portable phone is. Take a portable phone, turn it on and walk down the street. You'll get a dial tone pretty quick. Go ahead and call Tokyo now, your neighbor, who's service you're now using, won't mind. Someone can be sitting in a car or somewhere close to your house and be on your network without your knowledge or permission. Plus wireless is subject to noise and interference like any broadcast waveform. I don't like wireless. If security is a priority don't go wireless.

Subject:

Message:

What kind of router do you have? Many can act as a basic firewall that will block incomming request from getting into your network. In most cases its a setting in the routers config.

hex1848

**removed**

I have a hardware firewall/router AND Mcafee anti-virus. The IT guys here at work told me that will stop 95% of the crap, but nothing is foolproof...

In addition to what has already been posted, change the default passwords in the router, trust me, some one local to you knows all of them.

This link has some instructions for setting up a wireless router:

http://www.maximumpc.com/how_to/reprint_2004-01-05.html 

They mention NetStumbler for testing and it is quite good. I was amazed at the number of unlocked wireless systems near me. A friend and I counted 65 during a 45 minute cruse around town.

http://www.dslreports.com/tools 

at the bottom has a "port scan" test. I don't understand it all, but it seems to tell you whether you are visible to the internet or not, whether your firewall is effective. There is also information about the ports, etc.

That link also has a speed test to check out your connection.

The wireless aspect, being inside the router/firewall, is a completely separate thing to secure (as others have stated).

THL has good info. A router has advantages from being exploited, because you ar NAT'd behind the router. Basically, people can't see you directly, they see your router. This does not protect you completely, and certainly not from traffic that you inititate (surfing, emails, etc.) so you should also run a firewall/virus detection. Anti-Spyware software is another animal usually, so I would run those every now and then as well.

For wireless security, you need to do 3 things, all of which should be explained in your manual.

1. Don't broadcast your SSID - people won't see their is a network to exploit.

2. Do WEP encryption, if they do see it, they can not intercept your traffic.

3. Do MAC address authentication - doesn't let anyone on the network that have the above 2 correct except known addresses.

These are all very easy and should not take long. And don't think you are safe in the burbs, I can surf on my neighbors right now if I want and I am on an acre.

Very helpful. Thanks gang.

MrTelcom is all over it. Once you've completed steps 1 through 3 ... make sure you create a VLAN to cut down on your broadcast traffic on that gaint network in your house. One more thing turn off RIP and use OSPF then configure HSRP with your neighbor for fail-over.

... and then do the below and your ready to take on the world...

OK your block.

http://www.turnpoint.net/wireless/cantennahowto.html 

Lots of good info here. Just a few more tidbits...

While I agree with mrtelcom's 3 points, they'll only get you past the neighbors who think they're techie. If there's a 16 year old around, they'll get your SSID in a few minutes regardless of whether or not your're broadcasting it. Also, WEPs good, but not foolproof. Don't read that as "don't use it," because you should. Just know there are people out there with the skills and the tools to get past it. Lastly, once they have goten past the first two, they'll have sniffed and spoofed a MAC address. I know, I hire these guys to run my network 🙂

http://www.thinkgeek.com/computing/accessories/7060/ 

If you want to be a real geek, set up add a radius server into the mix, for authentication.

mikenix, wouldn't the neighbor's router need to be in standby to use HSRP?

-Wolfy

And this is why I don't like "wireless." A determined and or skillful geek can exploit most any broadcast waveform.

Beware of "Evil Twin" hotspots...

http://news.zdnet.com/2100-1009_22-5545355.html 

There's no such thing as a secure network, wireless or not.

-Wolfy (wearing a white hat)

This is good info. I'll likely be using the wireless feature only at home. Sounds like I still need to do a few things to help protect that.

Wolf - I was just playing with the whole HSRP/VLAN/OSPF thing, none of it is possible without 10K in hardware or many sleepless nights compiling the latest Linux Kernel and configuring your brains out in both locations.

Network security always needs prospective. The following are some considerations

1) How important is the data on the network?

2) If access is gained how much damage can be caused?

3) How many perimeters can you afford create internally?

I’ve worked on some of the world’s most secure networks and the common theme is zones or secure networks with-in the larger internal network. Most large companies even if you were able to get on main internal network it would take another one to two security breaches of additional networks to do any bottom line effecting damage. The federal government also has proprietary OS and network protocols that require inside knowledge to even function.

The moral of the story here is do you were a bullet proof vest and Kevlar helmet and drive a bullet proof car to work everyday? Most just say “if it’s your time to go…” and go along their marry way. Computer security is much the same, just make it difficult to be ‘Cracked’ (hacked is not really the correct term) then mitigate and understand the risk and worry about issues you can control, like what you’re going to smoke next.