Re: Internet Connection Firewall question

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

From: Shenan Stanley (news_helper_at_hushmail.com)
Date: 08/12/04 

Date: Wed, 11 Aug 2004 23:17:11 -0500

Answers "inline"...

bill allemann wrote:
> When the ICF is enabled, will other pc's on the LAN be able to
> connect to shares?

No - if it is configured in the default manner, File and Print sharing is
BLOCKED.
True for ICF and Windows Firewall (SP2).

> I tried it, and it didn't seem like the shares
> were available to other LAN machines. In some support files on the
> MS website, some mention was made of issues about the private
> networking, and a FAQ link was given that was supposed to explain,
> but it had nothing at all on the subject. In other help files, the
> subject is very ambiguous or not discussed at all.
> I couldn't find any config mechanisms to set trusted IP's, etc like
> software firewalls always have.
> Anyone know of some real info on the subject?

Well, for ICF, the information on how to open the correct ports to allow for
File and Printer sharing is here:

How to Manually Open Ports in Internet Connection Firewall in Windows XP
http://support.microsoft.com/?kbid=308127

What ports do I need open?
http://www.microsoft.com/security/protect/ports.asp

With Windows Firewall(SP2), it's a checkbox. 

-- 
<- Shenan ->
-- 
The information is provided "as is", with no guarantees of
completeness, accuracy or timeliness, and without warranties of any
kind, express or implied.  In other words, read up before you take any
advice - you are the one ultimately responsible for your actions.

Relevant Pages

  • Re: iptables configuration
    ... >> that if a 'virus/trojan' initiated a connection to the net, the firewall ... >> would not protect the LAN. ... The LAN is NATed with private IPs to one public IP. ... the ports that are used by services running on linux. ...
    (comp.os.linux.security)
  • Re: How to stealth against ping/echo requests?
    ... I just started using the Online-Armor firewall. ... Some ports are even open. ... Are you behind a router? ... Every time it founds a new LAN, it asks if you want to trust it ...
    (comp.security.firewalls)
  • Re: How good is Win XP Pro Internet Connection Firewall
    ... ICF blocks all incoming connections. ... and run the IIS Lockdown Tool. ... By default Norton Firewall allow access to IIS. ... So it's best to close the ports when you're not using ...
    (comp.security.firewalls)
  • Re: How do I use IPSEC to create a basic firewall.
    ... Ipsec is best used to manage/protect traffic for the lan. ... > secure domain controllers by IPSEC, thus providing a basic firewall ... > response ports opened by connections going to the WAN. ...
    (microsoft.public.win2000.security)
  • Re: Odd nmap result qaz and netbios on Linux
    ... Samba isn't installed anywhere within that lan. ... refer to is a minimal firewall. ... >>the same ports open. ...
    (comp.os.linux.security)