Forum Home
Press F1
 
Thread ID: 136695 2014-04-02 22:14:00 Free Firewall recommendations Billy T (70) Press F1
Post ID Timestamp Content User
1371820 2014-04-02 22:14:00 Well, my longtime D-Link 504G NAT Router finally expired last night. The power supply gave up the ghost, so I plugged in a replacement and it still didn't work, so I hooked up the free Thomson TG585 V7 that Telecom sent me a few years back and got back into action (with WiFi disabled) much to the disgust of Billy Jnr who is temporarily back in town and wanted to use it with his iPhone and Mac Book, probably so he can wander around the estate using up my BW in places where I can't see him!.

The residual problem is that the old router had a firewall function (network address translation?) but when I ran Gibson's test the Thomson was wide open, so I'll need to add a software firewall.

So, I'm looking for recommendations for what is essentially a 'set-up and forget' (or preferably an 'auto-setup and forget' click your way through the options Free download'.

Any and all recommendations appreciated. It needs to be as fast and painless to set up as possible as I am submerged with work at present.

Cheers

Billy 8-{)
Billy T (70)
1371821 2014-04-02 22:23:00 Well, my longtime D-Link 504G NAT Router finally expired last night. The power supply gave up the ghost, so I plugged in a replacement and it still didn't work, so I hooked up the free Thomson TG585 V7 that Telecom sent me a few years back and got back into action (with WiFi disabled) much to the disgust of Billy Jnr who is temporarily back in town and wanted to use it with his iPhone and Mac Book, probably so he can wander around the estate using up my BW in places where I can't see him!.

The residual problem is that the old router had a firewall function (network address translation?) but when I ran Gibson's test the Thomson was wide open, so I'll need to add a software firewall.

So, I'm looking for recommendations for what is essentially a 'set-up and forget' (or preferably an 'auto-setup and forget' click your way through the options Free download'.

Any and all recommendations appreciated. It needs to be as fast and painless to set up as possible as I am submerged with work at present.

Cheers

Billy 8-{)

Not sure if its free, but I use the Mac version of this which was the original version and it is the best thing since sliced bread.

Little Snitch for Windows (http://littlesnitchwindows.com)

It allows you to control network traffic.
Webdevguy (17166)
1371822 2014-04-02 22:54:00 Unless you want to become a DNS relay and wonder where all your data has gone, you need a firewall at the gateway, not at the endpoint device. You will have a hard time finding a router that doesn't have a built in firewall. Have you checked it isn't just turned off on the Thompson?

NAT and Firewall are different things, all routers do NAT, it's what a router does.
Alex B (15479)
1371823 2014-04-02 23:12:00 but when I ran Gibson's test the Thomson was wide open, so I'll need to add a software firewall.


What do you class as wide open ? every port or just a few open ports ?
One could be the back door that Telecom has in some of their modems : not a conspiracy btw :thumbs:
Or as mentioned, could be a setting ... check DMZ, ports opened for gaming, remote access, p2p/torrenting etc


Just get a well known brand modem router & it will be as safe as the other billion or so routers in everyday use.
Preferably not a Dlink or Belkin (just generalizing)
1101 (13337)
1371824 2014-04-03 00:06:00 I've not used the Thomson TG585 V7 but I have used an ST536 v6 and now the VDSL one, and both of those block all inbound by default, I think you have got some settings wrong in your TG585, because practically all the modern routers have a firewall inbuilt.

Check the instructions for changing firewall settings in the TG585 here: help.telecom.co.nz
Agent_24 (57)
1371825 2014-04-03 02:09:00 Yeah the NAT is sufficient, nothing will be reaching your PC unless you're explicitly port-forwarding it. The router will be responding differently, but it doesn't mean you're actually more vulnerable now.

The Gibson GRC test may show you're "wide open" but it's not you that's wide open, it's your router. Even then, it's not wide open, it's just not behaving in the same "super secret" manner, compared to your last one, it's still secure.

That said, when you run into issues with the Technicolor dropping out, get yourself the DrayTek DV2760n. It's VDSL2 compatible so is future-proofed, and it's an incredibly solid piece of kit. I would suggest the DV130 and a wireless AP running Gargoyle, but you strike me as more of a "Don't care, just give me an all in one that's going to be reliable" sort of bloke.

If I was you, I wouldn't bother with a firewall on your PC if you've never had one until now, just coz you're changing routers...
Chilling_Silence (9)
1371826 2014-04-03 05:10:00 Well, I'm in via the web interface and it is saying that the firewall is turned off, but I can't progress anyway because apparently I need to have a password. That is a bummer because I didn't enter any password or logon, the whole process was run from the CD and I was watching it the whole time. To make any change I'd probably have to do a full reset and start again. I've dug a little deeper and the config page give only three options Open, Block all outgoing, Block all incoming.

What the hell is the use of that?? I'm beginning to understand the angst that was flowing way back when Telecom first distributed these Thomson @#$%$#@. I'm not sure what it was all about, but I do recall that they were not popular which is why I simply left mine on the shelf until last night when the D-Link expired. I'm thinking I'll have a go at fixing it, I've repaired the power supply already so I'll see what ails the router but if I can't fix it, I'll buy a replacement.

Cheers

Billy 8-{) :(
Billy T (70)
1371827 2014-04-03 06:13:00 Try 'Admin' for the user and also the password. The password may also be blank. CliveM (6007)
1371828 2014-04-03 06:14:00 Any chance of right clicking on what ever and run as administrator. usually the password is blank. Bryan (147)
1371829 2014-04-03 06:14:00 You want "Block all incoming" - that (naturally) blocks all incoming connections - unless your computer asked for them (or you have certain ports opened manually, or have UPnP enabled and are running a program which uses it) Maybe a strange way of labeling it, but that's how it is.

As for the password, if you didn't set one, it should be the default, which AFAIK is either nothing (just press enter), or 'admin' or 'password', although the CD you ran may have set it to something else, I don't know, I never used those setup CDs, they're more trouble than they're worth, I always do the setup manually.

As for your D-Link I wouldn't be surprised if the capacitors have gone high ESR, they're not known to use top quality ones.
Agent_24 (57)
1 2