using a NAT; do i need a firewall?

[hugorudd]

Hey,

I got an NForce 4 mobo with its appalling NAM (non)functionality. I'm behind a decent NAT and a regular malware scanning regime. Do i need to go through the pain of sorting out a firewall as well?

[ArcticFox]

Depends on what a "decent NAT" is. Decent for some is something made by Netgear. Decent for others is a Cisco 1841. What are you behind?

[paul9]

A decent software firewall will let you keep an eye on applications trying to send data out of your system to the net. It can help you spot the odd trojan or spyware that may make it onto your system. Not essential, but handy.

[hugorudd]

It's one of the Voyager 205's from BT; it's a Globespan Virata Viking, running software version 1.8. I know it's not Netgear or Cisco, but I hate the idea of putting more links in a chain to fail, expecially when the NAT seems to have pretty good functionality.

I have the NAT pretty tight though, and I am assiduous in virus checking and spyware killing. Since I'm not running any server functions (except when in Linux), I assumed that I would be a minor security risk.

No?

[griobhta]

I would always put a software one on your machine to catch outgoing traffic just to be on the safe side. Doesnt hurt your machine resource wise these days.

g

[buckaro]

You might as well use a software firewall, i personally like to use ZA, takes up next to none of my system resources as griobhata states. You might as well be safe than sorry , and its actually quite easy to set-up IMO.

[wheelie007]

I also agree, a software firewall is an almost essential tool these days with so many trojans etc out there. They monitor all incoming and outgoing traffic and allow you to decide what comes in or goes out of your system.

ZA is free and does a good job.

cheers

[Cade Foster]

Big thumbs up to Zonealarm, though the free version is a lil limited.

Test your firewall here:

http://www.grc.com
click on shields up, scroll down - under "hotspots" click shields up/proceed and then do an all service ports scan - if your router is doing its job all the buttons should be green(stealthed)

As wheelie said your router won't prevent applications from calling home or trojans.