Subj : Re: For Trouble re Home Network Security To : alt.tv.farscape From : Trouble Date : Thu Sep 08 2005 15:37:00 From Newsgroup: alt.tv.farscape TNW7Z7Z7Z12345 wrote: > I think I get that the site has to be able to see the router and > assigned IP address. > But then it goes on to scan all of the ports and tells me how good > it is that they're all closed, but how much better it would be if they > were "stealth." i.e. - if no one from the outside could see them. > Obviously they're trying to sell me software, but not really > understanding any of this, I can't judge whether to take anything > they're saying seriously. Closed means that attempts to connect are refused Stealth means that attempts to connect are not answered at all Its WAY more important on big environment's firewalls, but a clever attacker will look for his attack vectors by scanning all the ports, a Stealthed machine might as well not be on the internet to them, whereas a port closed machine means that a machine exists, and they start looking for other ways in. The big difference is corporate firewalls usually HAVE TO let some kind of traffic in be it web or email, therefore the attacker will know they are there, and keep prying. In any case the attacker will see your machine, and keep moving onto a machine that is connected directly to the cable modem and has no protection... this is why Microsoft's firewall in Windows XP was so important, this gave them something, which was better than the nothing they had... -- "Do not seek to follow in the footsteps of the wise. Seek what they sought." --Basho .