firewall

Does a router intercept and stop outbound messages from a virus, trojan, or worm? Or do you need a software firewall such as Zonealarm to stop such messages?
========================

Here is an answer from someone that does not use either.

NO
YES

But what the heck do I know.

Since this thread is getting a little lengthy I would suggest you start a new thread where others may see it.

Actually, the correct answers are "probably", then "not really". I have several certifications including N+ (which is networking)and a college degree in Computer Science. My router/firewall (D-Link DI-704P)has a page in the configurations where I can enable/disable any ports and services, both incoming and outgoing. Most router/firewall combinations have this capability, but most people don't know how to set it up properly. In fact, most don't know it even exists. A hardware firewall is ALWAYS better than a software one. Just think about this, where is your Zonealarm at, or any software firewall? Inside your hard drive. An attack or probe will reach your computer (to a point)before it is stopped. By the time it is stopped, the damage can already be done. A hardware firewall, on the other hand, stops any unsolicited data BEFORE it ever reaches ANY point INSIDE your network. Heck, a batch file can even been sent that will turn off a software firewall whereas my hardware firewall will discard it. If you have the option, an "average" hardware firewall is more secure than any software firewall. Think about it. How many businesses install software firewalls instead of hardware ones? Do you think "home users" are smarter than they are? Or maybe, businesses just have too much money to spend, so they blow it on more expensive hardware firewalls? Believe it or not, there is a reason for their "madness". Same thing goes for wireless networking? Why aren't businesses flocking to switch to wireless instead of wired networks? Security. Period. The BEST wireless network you can create, encrypted and all beefed up with security features, is less secure than that same network with a wired connection. If you want security, why settle for a little if you can have more? Get a hardware firewall.

The router at the office is better than most. We only allow outbound traffic on port 80. And another which I won't reveal. This snaps the lid shut on most call home software.

We also use OpenSHH and that gives us a secure link to move files around the world.

Even the Linksys can block outbound if you want to a number of ports and UDP or TCP connections.

Bob