A firewall is a piece of software or hardware that sits between you computer and the internet, and only allows certain types of things to cross it. It's about protecting you from them, where "them" is the malicious folk on the internet. A correctly configured firewall does not block your access out to the internet - you should be able to browse the web, for example, without interruption. The firewall prevents access from somewhere on the internet to you. That's not to say people can't send you mail - they can because you access your mail through the internet when you retrieve or download it. It does mean that people can't copy files directly to your PC, or cause programs to be run on your machine.
As I've discussed before, I think it's critical that if you're on a broadband internet connection you make sure that you are behind a firewall. If you're using a public WiFi hotspot, it's a good idea and there are even times when it makes sense to use a firewall on a dial-up connection.
The question is, what firewall to use?
The answer varies.
Become a Patron of Ask Leo! and go ad-free!
For broadband connections (which include cable and DSL and other always-on and high-speed connections) I recommend that you use a router that supports or provides network address translation or NAT. Normally, a router is thought of as a connection sharing device, used to share a single internet connection among several computers. But even if you have only one computer, the NAT functionality in your router effectively "hides" your computer from many of threats on the internet.
My routers are all LinkSys routers. In particular, I have installations running both the 802.11b Wireless Access Point Router with 4-Port Switch, as well as EtherFast Cable/DSL Router with 8-Port
Switch. I've been quite happy with both. I've also heard good things about the support for the faster wireless standard 802.11g.
In some cases, you'll want to consider a software firewall. Software firewalls monitor the data traversing the network connection on your machine. They block incoming traffic that isn't explicitly allowed, and can also warn you of unexpected attempts to access the internet from your machine.
The built-in Windows Firewall in Windows XP is a fine, free, basic solution. It is, in fact, what I use when I visit a WiFi hotspot, or connect to some other network I'm not totally certain is safe. It's also a good solution if you're connected via dial-up for long periods of time.
Other popular software firewalls include ZoneAlarm and Comodo. The Windows Firewall doesn't alert to unexpected outgoing connections, but most of these products do.
Note: in all cases, hardware or software, built-in or add-in, it's going to be important to know how to configure your firewall properly. Firewalls are the leading cause for certain functions, such as instant messaging, or audio connections, from working. These are typically easily fixed with a quick configuration change within the firewall. Make sure to take the time to understand the documentation that accompanies your firewall.
Finally, when you believe you're protected, or even if you know you're not, you should visit Gibson Research and run "Shields Up" - a vulnerability analysis. It will try to access and analyze your computer from the internet, and enumerate for you exactly how you are vulnerable, and potential steps you can take. It tends to be a little techie, but it's worth the effort.
