Re: NLB and Windows Firewall

Tech Tip: Click here to run a free scan for Windows Errors and optimize PC performance

"JayDubb" <jay@xxxxxxxxxxxxxxxx> wrote in message
news:44860BCB.3B3C714C@xxxxxxxxxxxxxxxxxxx
That's a shame. I'd never rely on it as the only defense (we use hardware
firewalls on every transit circuit at the border) but security is best
when
served up in layers.
Running the Windows Firewall on each host adds one more layer of
protection in
case a host inside the firewall gets compromised and tries to attack from
within. Leaving ONLY the service ports (21, 80, 443) open makes the
machine
no more vulerable to inside-the-firewall attacks than it is from the rest
of
the world.

You can use port rules in NLB to limit traffic.

--
Russ Kaufmann
MVP - Windows Server - Clustering
ClusterHelp.com, a Microsoft Certified Gold Partner
Web http://www.clusterhelp.com
Blog http://msmvps.com/clusterhelp


.

Relevant Pages

  • Re: Cant download files with IE 6
    ... I do not have the windows firewall ... running a firewall, i don't know what that is. ... i do know that the "host" ... # This is a sample HOSTS file used by Microsoft TCP/IP for Windows. ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: ZoneAlarm shuts down my DSL connection
    ... > "It should be noted that Windows Firewall is not as secure as MS would ... | The stealth test checks to see if your computer is visible to the ... Either a host ... Windows Firewall will let the Trojan ...
    (comp.security.firewalls)
  • Re: Age of Empires 2 Conquerors (AOE2) multiplayer LAN problem Vista-XP
    ... (center network and shared resources> Windows Firewall>change config> ... then start the game, host a multiplayer using TCP ...
    (microsoft.public.windows.vista.games)
  • Re: NLB and Windows Firewall
    ... served up in layers. ... case a host inside the firewall gets compromised and tries to attack from ...
    (microsoft.public.windows.server.clustering)
  • Re: Host Computer with ICS cannot be accessed
    ... I have the Main (Host) computer with XP SP1 which is the ICS computer on a ... firewall settings, not that I've found so far, but I'll keep looking. ... >>connection, I can check or uncheck the firewall setting to allow others on ... Is there a way I can tell my Host server to allow the Client ...
    (microsoft.public.windowsxp.network_web)