Re: Does ICS or Firewall have a NAT

In article <OOa9nceGGHA.1124@xxxxxxxxxxxxxxxxxxxx>, "Descartes"
<descart(AT)-REMOVE-THIS-welho(DOT)com> wrote:
>>>Hi All,
>>>
>>>A friend of mine said that there's a NAT functionality built into the ICS
>>>(or Windows Firewall) when I set up a home network and Internet sharing on a
>>>XP Pro machine. Could you verify this?
>>>And if it is true, is there a way to enter static mapping?
>>>
>>>Any information on the topic would be highly appreciated.
>>>
>>>Descartes
>>
>>Yes, ICS uses NAT.
>>
>>What do you mean by "static mapping"? What exactly do you want to do?
>
>Well I read somewhere, that a NAT creates a mapping of an intranet computers
>request out to the Internet. When a response arrives from the internet, the
>NAT looks in its mapping, to which intranet computer it should forward the
>response. This mapping is created dynamically and deleted when not needed
>anymore. The side effect of this is that the NAT actually works as a kind of
>fire wall neglecting all inbound traffic for which it does not have a
>mapping. This is all OK and does not require static mapping.
>But, if I would set up a server (on the intranet) to be accessible from the
>Internet, the NAT would need a static (persistent) mapping to know to which
>computer forward the requests coming from the Internet and addressed to the
>server.
>Please correct me if this doesn't make sens at all.
>
>Best reagrds
>Descartes

Yes, that makes perfect sense. To make the static mapping, configure
the Windows Firewall to forward the desired traffic to a specific port
on a specific computer:

1. Right-click the shared Internet connection and click Properties |
Advanced.

2. Click the Settings button under Internet Connection Sharing.

3. If the desired service is listed, put a check mark in its box,
click Edit, and enter the name or IP address of the computer hosting
the service.

4. If the desired service isn't listed, click Add, define the service
and its ports, and enter the name or IP address of the computer
hosting the service.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com
.

Loading