Experience Sharing: experience in using firewall programs

As hackers flood, firewall software emerged to prevent malicious supply. However, we should be able to correctly use the firewall software to truly serve us. Below I will introduce some experiences in the use of firewall software to you.

I. Security Level

At present, most firewalls define security levels. In order to give different users different security control needs, many users do not understand this. For security, we will blindly adjust the security level to "High Security Level" and think that the higher the security level, the better. This is not the case. If your computer is too secure, you will find that online games cannot be started, in addition, the video program cannot access the online video files (which is a huge loss for ADSL users ). So what exactly does various security levels mean?

Low Security Level: computers will open all services, but computers on the Internet are prohibited from accessing file and printer sharing services. Applicable to users who provide services in the LAN. This is the security level with the highest degree of freedom, so it is limited to "network experts.

Medium Security Level: access to system-level services (such as HTTP and FTP) is prohibited ). Machines in the LAN can only access file and printer sharing services. Use Dynamic Rule management to allow port services opened by authorized programs, such as services provided by online games or video and voice calls. In addition, the security level is generally the default value because it can ensure that users who send and receive emails and transfer files can.

High Security level: the system will shield all ports that are open to the outside, prohibit access to the local machine to provide all services, block common trojan programs and attacks, and provide strictly controlled network access capabilities; applicable to users who only browse Web pages online. Of course you cannot play online games.

In addition, all security levels control the application's network access permissions.

Ii. Fix Vulnerabilities

Most firewall software can fix system vulnerabilities, many of which are repaired through their own programs. However, the "Kingsoft subnet" is not the same. After investigating system vulnerabilities, it will tell you the official website address of the patch to download and install the patch. This is very good for WIN 9X users, because the official stuff is trustworthy, but it is not very good for win xp users, because the win xp service PACK1 patch package requires 134 MB, therefore, you can use it as needed.

3. Do not let the firewall defend against fire

Recently, a virus named "W32.Campurf @ mm" is transmitted through an email attachment. The attachment name is FC. EXE, which can interrupt the firewall program installation process. If the virus exists, you can run the REGEDIT. EXE program, delete the fc/runfc.exe values in HKEY_LOCAL_MACHINESOFTWAREMicrosftWindowsCurrentVersionRun, upgrade your anti-virus software, and then scan and kill the virus. How can this virus be prevented? First, the firewall and anti-virus software should be used in combination, and the two should be upgraded frequently. Second, it is best not to open an inexplicable email attachment. Third, it can be recorded based on logs, find out the time when hackers do not often provide attacks. During this "safe time", accessing the Internet can greatly reduce the probability of attacks. After all, the functions of the firewall are not unlimited. It's just a little high!