Re: how to configure windows firewall?

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Leythos (void_at_nowhere.lan)
Date: 02/17/05 

Date: Thu, 17 Feb 2005 14:34:16 GMT

On Thu, 17 Feb 2005 16:29:50 +0200, alebastr wrote:

>
> "Leythos" <void@nowhere.lan> wrote in message
> news:pan.2005.02.17.12.30.49.571655@nowhere.lan...
>> On Thu, 17 Feb 2005 14:22:44 +0200, alebastr wrote:
>>
>>> Windows XP, Home ed, SP2. Small LAN, 4 PCs. There are also few other LANs
>>> connected to same router(ISP). We need isolate our LAN from oustside
>>> connections, include this another LANs. Windows firewall is enabled, I
>>> configured all firewalls for 'Custom List' IP addresses:
>>> 'File and Printer Sharing' > Edit > [TCP139,TCP445,UDP137,UDP138] >
>>> Change
>>> scope > set in 'Custom list' window local IP of our pcs, like this:
>>> 192.168.0.22,192.168.0.23,etc
>>>
>>> After a some time I found, that someone still can print documents in our
>>> printer from outside LAN! Also, I tried to exclude one local IP of our
>>> computers from 'Custom list' window, for experiment, and still can
>>> print/share from computer that nevertheless I still could print from the
>>> PC
>>> which has no permissible IP number.
>>> I found also, that system change IP addresses i have set in 'Custom list'
>>> window from 192.168.0.22 to 192.168.0.22/255.255.255.255 Why?
>>
>> If your connection is via DSL or Cable then get a Cable/DSL Router with
>> NAT and you're all set. They run about $50 most places.
>>
> --------------------
> Yes, broadband router will be best solution. Nevertheless, I would
> understand why my approach not work and where is error.(it seems to me, that
> I did all according to microsoft instructions)

I can't really tell you why the MS Firewall didn't work for you, it's the
first thing I disable in services on any machine we install.

the 192.168.0.22/255.255.255.255 means it's only looking at the .22 IP
address, the MASK of 255.255.255.255 means it won't look at anything else
in the network. If you want it to see 192.168.0.0 through 192.168.0.255
then you need to change the mask to 255.255.255.0

You are are 100% better off using a router that does NAT than relying on
the Windows Firewall product. 

-- 
spam999free@rrohio.com
remove 999 in order to email me

Relevant Pages

  • Re: how to configure windows firewall?
    ... the MASK of 255.255.255.255 means it won't look at anything else ... > the Windows Firewall product. ... does someone know inexpensive broadband router model, ...
    (microsoft.public.windowsxp.general)
  • Cant get IP forwarding to work - Debian
    ... I enabled IPforwardig but it wont ... mask 255.255.255.0 ... def gw 10.10.10.1 ... via the broadband router. ...
    (alt.os.linux)
  • Re: Firewall and NAT
    ... > I just wondering that a Broadband Router with NAT can act as a hardware ... Because NAT also hide the internal IP addresses. ... A firewall ... A Linksys does not have port based rules that filter outbound like a ...
    (comp.security.firewalls)
  • Re: NAT translation question for experts
    ... NAT in this manner? ... I have a network in my company that already uses 10.100.x.x/16. ... Absolutely, just change the mask. ... I want to change the destination range. ...
    (comp.dcom.sys.cisco)
  • [fw-wiz] PIX Firewall, Help with nemask use in NAT and Global comands
    ... Nat and Global commands. ... outside interface 190.190.190.192 MASK 255.255.255.224 ... NAT from inside to outside will be perform. ...
    (Firewall-Wizards)