Re: Protecting Windows ICS gateway PC?

From: Ian Burley (info@dp-now.com)
Date: 05/09/02 

From: "Ian Burley" <info@dp-now.com>
Date: Thu, 9 May 2002 11:35:29 +0100

Thanks for that - just one question, the comparison table on Zone Labs site
suggests only the Pro version has ICS support. Does that mean the free
version is now different to the one you used?

By the way, I assume that this whole arrangement definitely rules out
conferencing type applications running on the clients?

Thanks again!

Ian

PS The BSD solution sounds interesting and I know a couple of people who'd
be keen to push me in this direction, but if the easy option of getting Zone
Alarm to work, I'll stick with that.

"Blouis" <azul@nic.cz> wrote in message
news:slrnadjkir.246u.azul@ocbsd.socal.rr.com...
> On Wed, 8 May 2002 22:42:59 +0100, Ian Burley wrote:
> > I've deployed a spare old PC as a Windows (98SE) ICS gateway machine
> > connected via ADSL always on. It does nothing else and potentially
serves
> > half a dozen other networked PCs. Does it need a firewall? If so, what
is
> > recommended (software preferably). And what about the other PCs? All
have up
> > to date Sophos anti-virus installed.
>
> I used to run a win98SE Internet Connection Sharing gateway machine
> for my network before I built my FreeBSD NAT/Firewall that I now
> use today.
>
> I used Zone Alarm - Free Version. It should work just fine.
>
> If I remember correctly... I just added the Static IP addy of the
> internal NIC cards that belonged to each of the internal computers
> I was running. I think its the ADVANCED tab? I dont remember
> correctly but if you install Zone Alarm look for the advance tab or
> a tab you can click and you get a choice of adding trusted IP's...
> choose the one that says IP (I think it was the middle choice?) and
> then just enter a NAME for that computer and then enter the Static
> IP (ex. 192.168.0.4) and then press okay (or enter) and it should
> work... your machines should be able to communicate and share files
> with each other AS WELL as communicate with the internet A-OK...
>
> You could also install www.FreeBSD.org on that computer and have it
> do the exact same thing... especially if you are only going to use
> it as a firewall/NAT... check it out and download and burn it if
> you have a burner... if you are interested I know of a great
> tutorial that helped me build my FreeBSD NAT/Firewall and I will
> post it if you respond within the newsgroup as being a solution you
> might take :)
>
> Otherwise, Zone Alarm Free Version should work just fine for you.
>
> :)
>
> BL
> Southern California
>
> >
> > Thanks,
> >
> > Ian
> >
> >
> >
> >

Relevant Pages

  • Re: AD DNS naming
    ... my e-mail and Site Internet." ... infrastructure (mostly with respect to DNS and VPN). ... If you do not select this option and go with scenario 2 ... Each DNS zone is authoritative for the zone of that ...
    (microsoft.public.windows.server.dns)
  • Re: How many Global Catalog Servers are needed?
    ... make for an AD DNS FQDN domain name, ... external Internet you need scenario 1, although it is the most DNS-intensive ... Each DNS zone is authoritative for the zone of that name so ...
    (microsoft.public.windows.server.active_directory)
  • Re: .com versus.local
    ... DNS and public names on the internet etc but I have never had someone ... All DNS entries are help at the ISP. ... external Internet you need scenario 1, although it is the most DNS-intensive ... Each DNS zone is authoritative for the zone of that name so ...
    (microsoft.public.windows.server.dns)
  • Re: DNS domain name same as AD domain
    ... Or should I change the DNS domain first to something else? ... For any host name that you wish to have access from both your internal network and from the external Internet you need scenario 1, although it is the most DNS-intensive over time. ... Each DNS zone is authoritative for the zone of that name so therefore the external DNS zone and internal AD/DNS zone will NOT replicate with each other thereby prevent internal company records to be visible to the outside Internet. ...
    (microsoft.public.windows.server.dns)
  • Re: Domain naming strategies
    ... a delegation to an unreachable internal dns server. ... my e-mail and Site Internet." ... network and from the external Internet you need scenario 1, ... Each DNS zone is authoritative for the zone of that name so ...
    (microsoft.public.windows.server.active_directory)