Is a firewall on a server an absolute necessity?

abracadabra · 2005-08-15, 07:28 PM

Hi, I want let my domains be hosted on a dedicated server.

I got this offer by a major hosting company. However, to my surprise a firewall wasn't included in the quote I got from them.

An additional hardware firewall (SnapGear) would cost me an additional $ 99 per month.

Is a firewall on a server as necessary as it is on a home computer?

Or is it only advisable for paysites and when you store important info on the server?

I will only be using the server to submit galleries to tgp's.

SinSational · 2005-08-15, 09:26 PM

you should have a firewall. there are plenty of free ones that you host should set up for you at not charge.

juggernaut · 2005-08-15, 09:27 PM

Well my 1st question to you is what OS is on the box? I run a windows 2003 with iis6 and I have to say MS got its shit together with that system. I have been running it now for about 6 months and no one has gotten in. Well at least I hope they have not. But seriously its not needed if you know what you are doing and are on top of that stuff every day. You cant just let stuff slip over a few days, you must read the IAVA reports every day. Cause when there is a problem you are dealing with millions of hackers all over the world scanning subnets for unpatched systems.
Personnally I would say pay for it. Hardware FW are so much better then SW, but you better hope the company knows what they are doing with it. $99 a month is not bad for a HW. I know companies charging that for SW FW. All you really need port 80, and 21 open if you are just going to be using it as a webserver. Everything else should really be closed. Your not running mail from it so those are the only two you really have to worry about. Can't shut off 80 as you wont get it to the web. 21 you can live with out but then how you going to put stuff to it? If it was in your house I would tell you to shut off 21 also.

abracadabra · 2005-08-16, 01:45 PM

Thanks for the info guys

H2ohNeil · 2005-08-16, 01:57 PM

Firewall on a server is an integral part of security. You could have different set of firewall rules set on the server to block the "easy entrance" for any intruder. The hackers are getting even into servers with tight security so we could not think of a system without firewall. Just installing firewall rules is not enough but proper maintanence and upgradation of security rules is also important.

WEBAIR · 2005-08-16, 05:52 PM

check out the netscreen 5 ... while there are free SW firewalls available its always best to go with a hardware solution check it out its affordable and works great

IMHO of course

bootybanditinc · 2005-08-18, 02:32 AM

Man running no firewall on a server these days how script kiddies and hackers are is like a little school girl getting locked in a lockerroom with a team of football players. I run a router at home with a linux based software i load also a software firewall on my machine and i created a script to close all RPC ports that microsoft likes to use to talk to machines on the net! I'm CompTIA certified in security to so you here some ugly ugly stories!

juggernaut · 2005-08-18, 11:51 AM

Would love that script as, its a pain in the ass to shut off the MS ports. Post it for us please please please lol

2005-08-15, 07:28 PM	#1
abracadabra Internet! Is that thing still around? Join Date: Apr 2005 Posts: 6	Is a firewall on a server an absolute necessity? Hi, I want let my domains be hosted on a dedicated server. I got this offer by a major hosting company. However, to my surprise a firewall wasn't included in the quote I got from them. An additional hardware firewall (SnapGear) would cost me an additional $ 99 per month. Is a firewall on a server as necessary as it is on a home computer? Or is it only advisable for paysites and when you store important info on the server? I will only be using the server to submit galleries to tgp's.

2005-08-15, 09:26 PM	#2
SinSational Shut up brain, or I'll stab you with a Q-tip! Join Date: Jan 2005 Location: Boston, MA Posts: 119	you should have a firewall. there are plenty of free ones that you host should set up for you at not charge. __________________ ICQ# 273099174 - Free Month on All Plans

2005-08-16, 01:57 PM	#5
H2ohNeil Aw, Dad, you've done a lot of great things, but you're a very old man, and old people are useless Join Date: Jun 2005 Posts: 25	Firewall on a server is an integral part of security. You could have different set of firewall rules set on the server to block the "easy entrance" for any intruder. The hackers are getting even into servers with tight security so we could not think of a system without firewall. Just installing firewall rules is not enough but proper maintanence and upgradation of security rules is also important. __________________ H2oh Hosting - The Ultimate in Managed Hosting

2005-08-16, 05:52 PM	#6
WEBAIR Aw, Dad, you've done a lot of great things, but you're a very old man, and old people are useless Join Date: Sep 2003 Location: NYC Posts: 27	check out the netscreen 5 ... while there are free SW firewalls available its always best to go with a hardware solution check it out its affordable and works great IMHO of course __________________ mike@webair.com http://www.webair.com

2005-08-18, 02:32 AM	#7
bootybanditinc WHO IS FONZY!?! Don't they teach you anything at school? Join Date: Jul 2005 Posts: 40	Man running no firewall on a server these days how script kiddies and hackers are is like a little school girl getting locked in a lockerroom with a team of football players. I run a router at home with a linux based software i load also a software firewall on my machine and i created a script to close all RPC ports that microsoft likes to use to talk to machines on the net! I'm CompTIA certified in security to so you here some ugly ugly stories! __________________ Webmastercash #1 Casino affliate

2005-08-15, 09:27 PM	#3
juggernaut Registered User Join Date: Apr 2005 Location: Central Jersey! If I was rich and powerful I would dress as my avatar does. Posts: 1,448	Well my 1st question to you is what OS is on the box? I run a windows 2003 with iis6 and I have to say MS got its shit together with that system. I have been running it now for about 6 months and no one has gotten in. Well at least I hope they have not. But seriously its not needed if you know what you are doing and are on top of that stuff every day. You cant just let stuff slip over a few days, you must read the IAVA reports every day. Cause when there is a problem you are dealing with millions of hackers all over the world scanning subnets for unpatched systems. Personnally I would say pay for it. Hardware FW are so much better then SW, but you better hope the company knows what they are doing with it. $99 a month is not bad for a HW. I know companies charging that for SW FW. All you really need port 80, and 21 open if you are just going to be using it as a webserver. Everything else should really be closed. Your not running mail from it so those are the only two you really have to worry about. Can't shut off 80 as you wont get it to the web. 21 you can live with out but then how you going to put stuff to it? If it was in your house I would tell you to shut off 21 also.

2005-08-16, 01:45 PM	#4
abracadabra Internet! Is that thing still around? Join Date: Apr 2005 Posts: 6	Thanks for the info guys

2005-08-18, 11:51 AM	#8
juggernaut Registered User Join Date: Apr 2005 Location: Central Jersey! If I was rich and powerful I would dress as my avatar does. Posts: 1,448	Would love that script as, its a pain in the ass to shut off the MS ports. Post it for us please please please lol