Not just for networks

[Redhat]

I would like to put across a point that I feel can strongly increase the security of your home/office computers. This is, using a router.

A router is a piece of hardware which can be placed inbetween your broadband (adsl, dsl, cable etc.) connection and your pc or pc's.

It is commonly thought a router is just if you want a network. Whilst they are indeed made for network, they can be an invaluable security device for single PC's too.

Let me explain how they can increase the security of your systems. Router's use a system called Network Address Translation (NAT). This means that basically you have the router, and the systems behind it. The outside "world" can only see the router, not each individual workstation behind it.

For a pictoral representation please see the attached image.

This helps, as it effectively acts as an inbound firewall, to the PC's behind the router. You don't have to worry about such worms as Blaster and Nachi, because they can only see the router, which is not vulnerable.

Myself and many security-concious individuals often talk about a layered approach to security. The idea behind the theory is if one part of your security fails, another one is there to step in. This does not mean "running two personal firewalls". It means your firewall blocking Blaster, but if it doesn't because of bad configuration, your anti-virus is there to detect it.

Having a router follows this thesis. If your router is somehow compromised (nothing is EVER un-crackable) then it does not mean your PC is compromised either. If you run (and I HIGHLY recommend you do) a personal firewall on your PC, the attacker would then have to battle with that too. Many would give up, too much effort for little reward. (I've studied the psychology behind malicious attackers' minds extensively).

There are obviously some small letdowns. You have to configure your router to use special service's effectively such as IRC or some P2P programs.

You can do this by using portforward, which directs all data packets sent to the router form the internet, directed at a certain port, directly to the specified workstation).

Another advantage of running a router are obviously that you can have a LAN (Local Area Network). Connecting multiple PC's to a LAN let's you share the internet access and also use file and printer sharing services if running Microsoft Windows.

Now we come to the required equipment to run a router with your computer or computers :

A network interface card - all new computers come with a 10/100 Ethernet card normally, or you can buy them at a popular "computer superstore" for £10.

A Cat5/Cat5e cable - normally supplied with your router.

A broadband connection.

And of course, the router. now the most popular brands are Belkin and Linksys. I run a Linky BEFW11S4 which also is a Wireless Access Point for my network.

Heres a Belkin one, for £40 : http://www.savastore.com/products/product....=10267658&pid=1

Shop around.

When you get your router remember to CHANGE THE DEFAULT PASSWORD on the configuration area. This is when you type in (for example) 192.168.1.1 into your web-browser and you can configure your router.

Good luck if you choose to take my advice, I'm here if you need any help at all.

[-pops-]

Interesting and wise advice.

I'm already on a router with several machines going but for what it costs and with the added confidence it gives, it should be worthwhile for anyone.

[bvw]

What an excellent post :)

[moon]

Nice one, redhat. :)

[Redhat]

:D More to come in Matt's "series of stuff" lol B)