Re: Does ICS or Firewall have a NAT

Steve Winograd [MVP] wrote:
> In article <OzS9IrfGGHA.3936@xxxxxxxxxxxxxxxxxxxx>, "Kerry Brown"
> <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote:
>> Descartes wrote:
>>>> Yes, ICS uses NAT.
>>>>
>>>> What do you mean by "static mapping"? What exactly do you want to
>>>> do? --
>>> Well I read somewhere, that a NAT creates a mapping of an intranet
>>> computers request out to the Internet. When a response arrives from
>>> the internet, the NAT looks in its mapping, to which intranet
>>> computer it should forward the response. This mapping is created
>>> dynamically and deleted when not needed anymore. The side effect of
>>> this is that the NAT actually works as a kind of fire wall
>>> neglecting all inbound traffic for which it does not have a
>>> mapping. This is all OK and does not require static mapping. But,
>>> if I would set up a server (on the intranet) to be accessible
>>> from the Internet, the NAT would need a static (persistent) mapping
>>> to know to which computer forward the requests coming from the
>>> Internet and addressed to the server.
>>> Please correct me if this doesn't make sens at all.
>>
>> Yes, ICS can do what you want. A stand alone router is a better idea
>> for a couple of reasons.
>
> I agree that a router is usually better than ICS, Kerry. But a router
> can't do the job if you're sharing a non-Ethernet Internet connection,
> like a dial-up modem or a USB cable modem.
>
>> 1) Using ICS the gateway computer is dirctly exposed to the Internet
>> on the public interface. A router will give all computers some level
>> of protection from malware. ICS will give all the other computers
>> this level of protection but the computer running ICS will still be
>> exposed.
>
> The ICS computer should be fine if it's running Windows Firewall.
> However, a router plus firewall gives two layers of protection.
>

Two layers is always better.

>> 2) The computer running ICS must be on for the other computers to
>> access the Internet. The computer running ICS will run slower
>> because of ICS. You may or may not notice this depending what else
>> the computer is used for.
>
> I can't imagine that ICS would have a noticeable effect. A typical
> broadband router has much less memory and a much slower processor than
> any computer that can run XP. For example, my SMC Barricade router
> has a 40 MHz CPU and less than 1MB of memory
>

I have seen otherwise respectable machines have a noticable slowdown,
especially when dialing, when a some winmodems are used with ICS. As you say
normally not a problem, but it can be noticable.

Kerry



.

Relevant Pages

  • Re: how do i configure??
    ... However, it's possible that if you connect the Internet input of a router to the ICS NIC on the laptop, may be able to configure the router to restrict access. ...
    (microsoft.public.windowsxp.network_web)
  • Re: how do i configure??
    ... possible that if you connect the Internet input of a router to the ICS ... NIC on the laptop, ...
    (microsoft.public.windowsxp.network_web)
  • Re: how do i configure??
    ... the ICS be 'only' be able to access the 'one' necessary site. ... like a router for the other computers. ... 'limited' to what IP address that the laptop is viewing or are the ... be on in order for any of the other computers to access the Internet), ...
    (microsoft.public.windowsxp.network_web)
  • Re: ICS on small home network no longer works for http traffic
    ... 1) If you're using MS ICS or Windows ... After installed a new router or cable modem replacing dial-up to access ... the Internet, you can't access some web sites. ... The client PC can ping to a outside IP, or a name and DNS> resolves the name ok. ...
    (microsoft.public.windowsxp.network_web)
  • Re: NAT on SBS2003 not working
    ... internet through an ADSL modem/router ... modem/router LAN IP 192.168.2.something/255.255.255.0 (please confirm the ... you need to change this and as you have the router available I suggest you ... > there are three methods of sharing the connection: ICS, ...
    (microsoft.public.windows.server.sbs)
Loading