Re: Firewall

Tech-Archive recommends: Fix windows errors by optimizing your registry

From: Herb Martin (news_at_LearnQuick.com)
Date: 11/27/04 

Date: Sat, 27 Nov 2004 02:59:13 -0600

"Matthew" <turn.deletethis@alltel.net> wrote in message
news:#qTLKkD1EHA.3616@TK2MSFTNGP11.phx.gbl...
> I have what amounts to a peer-to-peer network (I do have Win2000 Server,
> though) with DSL internet.
> I am thinking of adding a new computer and wanted to know if there was a
way
> to block it from accessing any of the other computer's shares while
allowing
> it to access the internet.
> Maybe have it in a different subnet with a network bridge?
>

Well sure -- but it isn't completely clear what you
have working and what you want to both work and
to avoid.

Share access is based on accounts and permissions,
but if you mean you don't won't authorized users to
access the share from unauthorized machines then
you would have to use some firewall/filtering
technique.

IPSec can do that -- most people incorrectly think
the IPSec policies ONLY are used for IPSec but
they can also be used to BLOCK or PASS traffic
(separate from invoking the IPSec -- i.e., the third
choice for the policy.)

You can block based on many things including
sourceIP/destinationIP/port etc. 

-- 
Herb Martin
> Thanks for your thoughts
>
> Matthew
>
>