Re: Getting Windows XP To Act as NAT Server

On Thu, 9 Nov 2006 15:35:15 -0800, "Will" <westes-usc@xxxxxxxxxxxxxx> wrote:

"Chuck" <none@xxxxxxxxxxx> wrote in message
news:qq47l2ddu4v3p3slub8dvavseh6nmddmic@xxxxxxxxxx
On Thu, 9 Nov 2006 12:24:28 -0800, "Will" <westes-usc@xxxxxxxxxxxxxx>
wrote:

What is the easiest way to get Windows XP Professional to act as an NAT
server for only one of its attached host adapters?

Will,

ICS is a Windows XP NAT ROUTER solution - not NAT server. You can
configure ICS
on any one of multiple LAN connections.

<http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html>
http://nitecruzr.blogspot.com/2005/05/ics-is-ok-but-you-can-do-better.html

ICS isn't all that secure I guess? What's the cheapest commercial NAT
solution that would work on a Windows XP host? Most commercial solutions
are going to be full blown stateless firewalls that require a server OS for
the install, not to mention fairly serious dollars.....

I need the NAT on Windows XP just as a performance tweak on a VMWare virtual
machine used for a non production system. The VMWare built-in NAT
functions work but have terrible performance problems. I can certainly
try ICS, but just hate to lower security on the XP host.

Will,

The disadvantages of ICS are a combination of issues. You read the list I
suspect, and I know Steve did. All of them are not that earth shattering, and
if a NAT router was expensive, ICS would be well worth it. As it was 5 years
ago.

When you see decent NAT routers available for as little as $10 after rebate, why
gamble?

And yes, Steve, the currently known exploit uses a hostile computer on the LAN
as the attack medium. But that's why we have WF in the first place - to protect
each computer from the other. If you recognise that need, you must recognise
the need to prevent that protection from being tampered with.

Use one computer for doing the web browsing, and another for sharing the
service, and sharing it in safety. Don't mix the two. Certainly not to save as
little as less than one months web service.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.

Relevant Pages

  • Re: Getting Windows XP To Act as NAT Server
    ... ICS is a Windows XP NAT ROUTER solution - not NAT server. ... solution that would work on a Windows XP host? ...
    (microsoft.public.windowsxp.network_web)
  • Re: IP address assignment for VPN computers
    ... To connect a windows 2000/2003 network to the Internet, you may use one of two methods: ICS and NAT. ... ICS is designed to provide a single step of configuration on the computer running Windows 2000/2003 to provide a translated connection to Internet for all of the hosts on the network. ...
    (microsoft.public.windows.server.networking)
  • Re: NAT + Port Forward on Windows XP
    ... ICS and forwarded some ports and it worked too. ... after I enabled ICS, NAT doesn't work anymore. ... How many network adapters does the Windows XP box have? ...
    (microsoft.public.windowsxp.network_web)
  • Re: Getting Windows XP To Act as NAT Server
    ... ICS is a Windows XP NAT ROUTER solution - not NAT server. ... solution that would work on a Windows XP host? ...
    (microsoft.public.windowsxp.network_web)
  • Re: NAT + Port Forward on Windows XP
    ... ICS and forwarded some ports and it worked too. ... after I enabled ICS, NAT doesn't work anymore. ... How many network adapters does the Windows XP box have? ... The IPEnableRouter registry key enables IP forwarding in Windows ...
    (microsoft.public.windowsxp.network_web)