om.newsgroup@gmail.com writes:

> It was my understanding that a router gave a hardware firewall which
> was a million times better than a software one and gave you more
> protection.

From external, network-based attacks this is true.

> I have a Belkin router, which like most other low end routers claims to
> have two hardware firewalls, SPI and NAT I think.
>
> So... why do I need a software firewall??

A software firewall can add something your network level firewall
cannot. It can interactively prompt you when new unknown programs on
your PC try to make outbound connections.

This can be helpful in tipping you off to drive-by installs of
software that shouldn't be on your machine, or alert you to software
that is phoning home that shouldn't be.

> In that case, why have a hardware firewall?

Because if your software firewall goes down (which it can), then
you're unprotected. Hardware devices are relatively non-complex and
are easier to secure, unlike a multipurpose computer.

> I can kind of see why both are necessary in my own head... but I'd like
> to hear what the experts have to say about it.

Best Regards,
--
Todd H.
http://www.toddh.net/