Re: Firewall for Network

From: keezdriver (NOTda.THISkeezdriver@STUFFverizon.net)
Date: 04/24/02 

From: keezdriver <NOTda.THISkeezdriver@STUFFverizon.net>
Date: Wed, 24 Apr 2002 16:20:48 GMT

Duane Arnold wrote:

> I know about MS ICS. What I didn't need is a smart remark from you. And
> since ISP(s) are starting to home in on more then one computer using ICS
> without additional IP(S) and not using a router, I was curious. I was just
> trying to get some info to help a friend who is trying to find a way with
> out using a router.
>
> If NAT can block the ISP from seeing the MAC address of addition computers
> sharing one IP great.
>
> Some of you people out here are terrible with your arrogance.
>
> Duane
>
> "keezdriver" <NOTda.THISkeezdriver@STUFFverizon.net> wrote in message
> news:Hzqx8.6414$d96.3809@nwrddc04.gnilink.net...
>> Duane Arnold wrote:
>>
>> > I couldn't resist. Is AT&T your ISP or some other ISP using AT&T as the
>> > backbone network? If any of this is true, have you purchased
> additional
>> > IP(s) for the other computers. If you have not purchased additional
> IP(s)
>> > using AT&T, then I would certainly like to know how you are doing
> Internet
>> > Connection sharing, without a router.
>> >
>> > I hope I am not out of line here I just want to know.
>> >
>> > "Chris" <chris95008@yahoo.com> wrote in message
>> > news:a9vi5a$826$1@localhost.localdomain...
>> >> We have a cable modem on one computer and allow the other computers on
>> >> our
>> >> network to share the internet connection. I have tried using
>> >> zonealarm on the computer with the cable modem but it doesn't allow
>> >> the other computers
>> >> to see the internet. I could remove zonealarm from the computer with
> the
>> >> cable modem and install it on each computer on our network but that
>> >> leaves
>> >> the computer connected to the internet vulnerable. Is there a setting
> in
>> >> zonealarm or another firewall program that would allow all computers
>> >> to
>> > have
>> >> firewall protection. Ideally the computer on the cable modem would be
>> >> the only one with the firewall and the other computers underneath it
>> >> on the network would be protected as well.
>> >>
>> >> Thanks,
>> >> Chris
>> >>
>> >>
>> There are several commercial products that do NAT and Windows ICS also
> does
>> NAT, to the ISP it is only one computer accessing the net. If you are
> truly
>> an IT person you would know that.
>> --
>> Michael T
>> Don't blame me, I didn't vote for him!
>> Then again, neither did a lot of other people.
>> Linux User #228869 on Machine #147583
You are the one claiming to be the IT professional, the question you are
asking is an extremly simple question. If you are truely a pro you SHOULD
know know that using connection sharing is only connecting from one NIC
thus only one MAC address shows to the ISP. Every thing sent to the net
will be masked using NAT (network address translation). If your lan
computer 192.168.0.2 accesses the internet thru your ICS server at
192.168.0.1 then as far as the ISP is concerned the request came from the
server. If you have a hardware firewall and multiple IPs from your ISP you
might not be using NAT but all software ICS that I know of use NAT.
HTH 

-- 
Michael T
Don't blame me, I didn't vote for him!
Then again, neither did a lot of other people.
Linux User #228869 on Machine #147583

Relevant Pages

  • Re: Firewall for Network
    ... What I didn't need is a smart remark from you. ... > since ISPare starting to home in on more then one computer using ICS ... > If NAT can block the ISP from seeing the MAC address of addition computers ... >> Duane Arnold wrote: ...
    (comp.security.firewalls)
  • Re: How to I change ICS default IP address 192.168.0.1?
    ... ISP is only giving one address even though it is a Private address. ... My point is that because the> 'Internet' NIC has an address of 192.168.0.70, there is already NAT routing> somewhere on that network. ... Re-configuring ICS may work fine, but it places> you in a double NAT situation which frequently causes problems. ...
    (microsoft.public.win2000.networking)
  • Re: Firewall for Network
    ... > since ISPare starting to home in on more then one computer using ICS ... > without additional IPand not using a router, ... > If NAT can block the ISP from seeing the MAC address of addition computers ... >> Duane Arnold wrote: ...
    (comp.security.firewalls)
  • Re: How to I change ICS default IP address 192.168.0.1?
    ... and per RFC 1918 your ISP should not be giving you this address. ... It sounds like the provider is using NAT to give you Internet access. ... On your 2 NIC machine, disable ICS. ...
    (microsoft.public.win2000.networking)
  • Re: IP address assignment for VPN computers
    ... To connect a windows 2000/2003 network to the Internet, you may use one of two methods: ICS and NAT. ... ICS is designed to provide a single step of configuration on the computer running Windows 2000/2003 to provide a translated connection to Internet for all of the hosts on the network. ...
    (microsoft.public.windows.server.networking)