- #1
liokaiser
- 4
- 0
is it possible to hack a computer if it has a firewall?
Can Firewalls Protect Computers from Hacking?
In summary, it is possible to hack a computer that has a firewall, depending on the type of firewall and how well it is configured. Hackers can use various techniques to gain access to a computer, such as running a scan to find vulnerabilities and exploiting them. However, having a strong and properly configured firewall, as well as keeping the system up to date and disabling unnecessary services, can greatly decrease the chances of being hacked. It is also recommended to use a more advanced hardware-based firewall for added protection.
- #2
dduardo
Staff Emeritus
- 1,906
- 3
Simple Answer: Yes
Long Answer: If a hacker knows your ip address they could run a nessus scan to find any vunerabilities that will allow me to gain access to your computer. With this information they would download the hack coresponding to the exploit if they don't already have it on their computer. Once in your system they can use a program to escalate their user previlages. From there they could steal or deface anything they want. Depending on how well you configure your firewall and services (web server, ftp, telnet, ssh), will determine how difficult it would be to gain access.
By the way. I think I hear your boss calling you from Max Online
Long Answer: If a hacker knows your ip address they could run a nessus scan to find any vunerabilities that will allow me to gain access to your computer. With this information they would download the hack coresponding to the exploit if they don't already have it on their computer. Once in your system they can use a program to escalate their user previlages. From there they could steal or deface anything they want. Depending on how well you configure your firewall and services (web server, ftp, telnet, ssh), will determine how difficult it would be to gain access.
By the way. I think I hear your boss calling you from Max Online
- #3
- 19,558
- 10,346
liokaiser said:
No system is absolutely safe, that is just a general principle. What type of firewall you have is important. Those client firewalls like zonealarm are better than nothing and keep out the script kiddies, but won't do a thing if a hacker knows what they're doing. Firewalls on a router however are a lot better because it's hardware based and the contact point is away from your computer.
- #4
liokaiser
- 4
- 0
Thanks for the replies.
dduardo, how do u know?which country are u from?
i like to learn more about internet security and how i can protect my pc.
any pointers on where to start?or perhaps some books?
dduardo, how do u know?which country are u from?
i like to learn more about internet security and how i can protect my pc.
any pointers on where to start?or perhaps some books?
- #5
dduardo
Staff Emeritus
- 1,906
- 3
liokaiser, I'm from the US. Do a google search on traceroute.
The best way to protect yourself and learn about security is to use linux. You would be amazed at how tight you can control your system. You can do everything: encrypted filesystems, low level stateful packet filtering, chroot jails, mandatory access control policies, intrusion dectection, honeypots, security auditing, etc.
I recommend using Gentoo Linux. Although the install is said to be someone complicated (Personally, I don't think it is), the Gentoo group did an excellent job writing step by step instructions. If you follow the instructions you should have minimal problems. When you do install make sure you have plenty of time on your hands. Depending on how fast your computer is, how fast your internet connection is, and how experienced you are, the install can take anywhere from one day to a week. You can stop anytime in the middle of the install and start again anytime.
Here is their site:
http://www.gentoo.org/
You can download a cd image from here:
http://www.linuxiso.org/distro.php?distro=45
The installation manual is here:
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml
If you want the to learn about the adding security features read this:
http://www.gentoo.org/doc/en/gentoo-security.xml
Once you finish the install here are some applications you might want:
http://www.insecure.org/nmap/
http://www.nessus.org/
http://www.snort.org/
http://firehol.sourceforge.net/
To install these applicaitons in gentoo simple do:
emerge nmap
emerge nessus
emerge snrot
emerge firehol
Here are some generic security sites:
http://www.securityfocus.com/
http://www.astalavista.com/
http://www.us-cert.gov/
http://www.sans.org/index.php
The best way to protect yourself and learn about security is to use linux. You would be amazed at how tight you can control your system. You can do everything: encrypted filesystems, low level stateful packet filtering, chroot jails, mandatory access control policies, intrusion dectection, honeypots, security auditing, etc.
I recommend using Gentoo Linux. Although the install is said to be someone complicated (Personally, I don't think it is), the Gentoo group did an excellent job writing step by step instructions. If you follow the instructions you should have minimal problems. When you do install make sure you have plenty of time on your hands. Depending on how fast your computer is, how fast your internet connection is, and how experienced you are, the install can take anywhere from one day to a week. You can stop anytime in the middle of the install and start again anytime.
Here is their site:
http://www.gentoo.org/
You can download a cd image from here:
http://www.linuxiso.org/distro.php?distro=45
The installation manual is here:
http://www.gentoo.org/doc/en/handbook/handbook-x86.xml
If you want the to learn about the adding security features read this:
http://www.gentoo.org/doc/en/gentoo-security.xml
Once you finish the install here are some applications you might want:
http://www.insecure.org/nmap/
http://www.nessus.org/
http://www.snort.org/
http://firehol.sourceforge.net/
To install these applicaitons in gentoo simple do:
emerge nmap
emerge nessus
emerge snrot
emerge firehol
Here are some generic security sites:
http://www.securityfocus.com/
http://www.astalavista.com/
http://www.us-cert.gov/
http://www.sans.org/index.php
Last edited by a moderator:
- #6
liokaiser
- 4
- 0
dduardo,thanks for the detailed guide.
i will work on it soon.
i will work on it soon.
- #7
The_Professional
- 428
- 1
liokaiser said:
YES, if the firewall is configured improperly. Disabling unneeded services adds another layer of protection as well.
- #8
PRodQuanta
- 342
- 0
I am in the process of reading Hacking for Dummies. All of the below has been explained in the book. Very, very interesting.
Paden Roder
P.S.- Of coarse I am an Ethical Hacker.
Paden Roder
P.S.- Of coarse I am an Ethical Hacker.
- #9
Anttech
- 233
- 0
Hacking is a missused term IMO, a hacker is in the open source community is a person who has a deep knowledge of computers programing networks etc etc, a Cracker is one who trys to break into your computer!
Software based client firewalls are a joke, they serve no purpose but to propogate fear. If you keep your system up to date, and disable unneed services (as mentioned above) then you will be safe for 99.9% of crackers... I have reviewed Zonealarm before and it dialogue box pops up when it hears harmless network chatter and claims that it had just "stoped a hacker from compromising your system" Thus propogating fear!
Zone Alarm etc are not statefull firewalls and thus are useless, they do not analyis packets and drop "funny" ones...
If you are that keen on knowing if people are connecting to you Computer, then download something free like TCP viewer for Windows from sysinternals
http://www.sysinternals.com/ntw2k/utilities.shtml
If you think you need a firewall then buy a proper one like a Cisco PIX that does proper deep scanning of packets NAT (DMZ) VPN etc etc...
To be honest a NAT device is probably all you need as this will wean out most people who are tring to crack your PC... I have been online for a long time and never have had my computer Cracked... At my work we have a LOT of people try to crack our systems, and thus we use proper firewalls IDS etc etc... But that is difference most Black hatter are not after 1 person they are after corporations!
Software based client firewalls are a joke, they serve no purpose but to propogate fear. If you keep your system up to date, and disable unneed services (as mentioned above) then you will be safe for 99.9% of crackers... I have reviewed Zonealarm before and it dialogue box pops up when it hears harmless network chatter and claims that it had just "stoped a hacker from compromising your system" Thus propogating fear!
Zone Alarm etc are not statefull firewalls and thus are useless, they do not analyis packets and drop "funny" ones...
If you are that keen on knowing if people are connecting to you Computer, then download something free like TCP viewer for Windows from sysinternals
http://www.sysinternals.com/ntw2k/utilities.shtml
If you think you need a firewall then buy a proper one like a Cisco PIX that does proper deep scanning of packets NAT (DMZ) VPN etc etc...
To be honest a NAT device is probably all you need as this will wean out most people who are tring to crack your PC... I have been online for a long time and never have had my computer Cracked... At my work we have a LOT of people try to crack our systems, and thus we use proper firewalls IDS etc etc... But that is difference most Black hatter are not after 1 person they are after corporations!
Last edited by a moderator:
- #10
syano
- 82
- 0
Agreed, 100%
Last edited by a moderator:
- #11
Dagenais
- 290
- 4
Instead of changing your OS, http://www.symantec.com/index.htm has a lot of advice for keeping your PC safe.
They also have an Online Tester.
Last edited by a moderator:
- #12
The_Professional
- 428
- 1
Linksys makes those cheap blue/black routers with NAT and other fancy features. A pretty good, adequate protection for the home user. I recommend it. Just don't forget to change the default username and password.
Either that or configure an old box with Linux IPchains. But for that you got to learn linux first ;)
Either that or configure an old box with Linux IPchains. But for that you got to learn linux first ;)
Last edited:
- #13
Nec
- 50
- 0
I have tried to connect my comp with the old one at the corner using a router, don't know why but blue message is shown up saying "refuse"...
why ?
why ?
- #14
Concord
- 14
- 0
(sigh...)Nec said:I have tried to connect my comp with the old one at the corner using a router, don't know why but blue message is shown up saying "refuse"...
why ?
- #15
HBar
- 67
- 0
http://www.catb.org/~esr/faqs/smart-questions.htmlNec said:I have tried to connect my comp with the old one at the corner using a router, don't know why but blue message is shown up saying "refuse"...
why ?
- #16
Anttech
- 233
- 0
lol...
I love that link :-)
STFW... and RTFM :-D
I love that link :-)
STFW... and RTFM :-D
- #17
Nec
- 50
- 0
Thanks Senpai for givingme a sigh! :DConcord said:
Nomikai Ropongi next time ? :D
FAQ: Can Firewalls Protect Computers from Hacking?
How do firewalls protect computers from hacking?
Firewalls act as a barrier between a computer and the internet, monitoring incoming and outgoing network traffic. They use rules and filters to allow or block specific types of traffic, helping to prevent unauthorized access to a computer or network.
Are firewalls effective in protecting against all types of hacking?
No, firewalls are not 100% effective in protecting against all types of hacking. While they can prevent unauthorized access to a network, they may not be able to detect and block more sophisticated attacks such as social engineering or malware.
Can firewalls prevent hacking attempts from within a network?
Yes, firewalls can be configured to monitor and block internal network traffic as well. This can help prevent insider attacks or unauthorized access from compromised devices within the network.
Do firewalls need to be constantly updated to protect against new hacking techniques?
Yes, firewalls should be regularly updated to ensure they are equipped to block new and emerging hacking techniques. This includes updating the firewall software itself, as well as configuring new rules and filters as needed.
Are hardware firewalls better than software firewalls?
Both hardware and software firewalls have their advantages and disadvantages. Hardware firewalls are typically more robust and can offer better protection for larger networks, while software firewalls can be more cost-effective and easier to configure for smaller networks or individual computers.
Similar threads
Calculators
Anti-virus and Internet Security Software