D-Link Di-624 Firewall not working?

When I first got a cablemodem, I was infected for 6 days straight with a
worm. After that, I got McAfee Personal Firewall and lived with less fear.
I checked the logs occassionally, and found many attacks per hour that were
detected and stopped.

Recently, I bought the D-Link DI-624, which says it has a firewall. I am
not sure it is doing anything. The McAfee firewall logs still show attacks
on the computer (hooked up with a wire to the router). My kids still use
AIM, BattleNet, and MediaPlayer, whereas these had to be configured with
McAfee.

So, is the router doing anything? How do I know?

I am most concerned because I use my office laptop at home, connecting
wirelessly. Since it is a corporate PC, they use a uber firewall to
protect the corporate net. They do not provide firewalls to the laptops.
I am afraid that my laptop is being attacked and the router is not stopping
it.

Dave

On Sat, 19 Jul 2003 13:24:11 GMT, Generic Dave
<(E-Mail Removed)> wrote:

>When I first got a cablemodem, I was infected for 6 days straight with a
>worm. After that, I got McAfee Personal Firewall and lived with less fear.
>I checked the logs occassionally, and found many attacks per hour that were
>detected and stopped.
>
>Recently, I bought the D-Link DI-624, which says it has a firewall. I am
>not sure it is doing anything. The McAfee firewall logs still show attacks
>on the computer (hooked up with a wire to the router). My kids still use
>AIM, BattleNet, and MediaPlayer, whereas these had to be configured with
>McAfee.
>
>So, is the router doing anything? How do I know?
>
>I am most concerned because I use my office laptop at home, connecting
>wirelessly. Since it is a corporate PC, they use a uber firewall to
>protect the corporate net. They do not provide firewalls to the laptops.
>I am afraid that my laptop is being attacked and the router is not stopping
>it.
>
>Dave

Run the "Shields Up" test at www.grc.com to test your router's
firewall.

Dave

> Run the "Shields Up" test at www.grc.com to test your router's
> firewall.
>
> Dave
>

Dave,

Thanks for the suggestion. Shields up only reported my IDENT port
available. Everything else appears blocked.

Thanks for the suggestion!

Dave

Hi,

I tried the scan you suggested on both my corporate laptop and my McAfee-
protect desktop. It found two ports, WEB (80) and IDENT (113) "closed"
as opposed to "blocked". In addition, it found ICMP (8) "open". I am
not sure if I should be concerned or not.

I checked the firewall logs, and it found no activity, which seems the
router is working well. In fact, the activity seems to have gone away
since my kids went away on vacation. Perhaps they are being risky using
AOL Instant Messenger. Or maybe a data-miner or MSN Explorer is letting
stuff in that the firewall thinks is an attack.

Anyways, I am not worrked anymore about automated attacks. My desktop
has the firewall which is blocking whatever the router is not (I hope!).
This is the one always connected to the internet. The corporate laptop
is only connected at home a couple hours per night, and over the weekend.
The rest of the time, the corporate PC is behind the corporate firewall,
which I think is operating properly.

Thanks for the help,

Dave


"Arild Bjørk" <(E-Mail Removed)> wrote in
news:6fjSa.7328$(E-Mail Removed):

> I think you're suffering of an classic example of an overeager
> software firewall that is setup to list for instance dropped packets.
>
> I would suggest you visit http://scan.sygate.com/ to check your D-link
> firewall. Use another machine than the corporate PC without it's own
> firewall. See what the different scans reports.
> "Generic Dave" <(E-Mail Removed)> skrev i melding
> news:%DbSa.85603$(E-Mail Removed).. .
>> When I first got a cablemodem, I was infected for 6 days straight
>> with a worm. After that, I got McAfee Personal Firewall and lived
>> with less
> fear.
>> I checked the logs occassionally, and found many attacks per hour
>> that
> were
>> detected and stopped.
>>
>> Recently, I bought the D-Link DI-624, which says it has a firewall.
>> I am not sure it is doing anything. The McAfee firewall logs still
>> show
> attacks
>> on the computer (hooked up with a wire to the router). My kids still
>> use AIM, BattleNet, and MediaPlayer, whereas these had to be
>> configured with McAfee.
>>
>> So, is the router doing anything? How do I know?
>>
>> I am most concerned because I use my office laptop at home,
>> connecting wirelessly. Since it is a corporate PC, they use a uber
>> firewall to protect the corporate net. They do not provide firewalls
>> to the laptops. I am afraid that my laptop is being attacked and the
>> router is not
> stopping
>> it.
>>
>> Dave
>
>
>