Re: Configuring Norton...

From: Fishstick (erik-andersson_at_home.se)
Date: 11/04/03


Date: Mon, 03 Nov 2003 23:45:18 GMT


> Fishstick,
>
> Let me see if I've got this right . . .
>
> > ... I'm connecting through a computer using
> > microsofts internet connection sharing. My problem is that I would like
to
> > make a "tunnel" past the firewall (Norton internet security 2002) that
> would
> > allow all traffic to and from my internal IP to pass through.
>
> To me, this means that you're on a client machine running behind an ICS
> gateway on a machine with NIS 2002 installed. Is that correct?

Yes exactly.

>
> If so, then the NIS 2002 firewall on the ICS gateway box is only
protecting
> that box and should have no impact on your ICS 'client' machine -- well,
> other than the obvious. Between ICS and the NIS 2002 on the gateway
> machine, your 'client' box probably won't be able to receive unsolicited
> inbound TCP/UDP communications. If, on the other hand, you WANT to be
able
> to have unsolicited inbound comms permitted to your client machine, then
you
> need to customize ICS to 'permit' such pass-through communications. What
> that involves is highly dependent on which version of ICS you're running
on
> the gateway box and what the OS of the gateway box is.

The gateway box is running WinXP Home, I don't know what version of ICS it
has...

>
> But the NIS 2002 on the gateway machine will have no impact on your
outbound
> comms originated from your ICS 'client' machine to the rest of the
Internet.
> (which is why it's recommended for almost all software firewalls that you
> install a separate firewall on such 'client' machines if you want outbound
> control)
>
> > The situation
> > I want is that I would be able to run and configure a firewall on my
> > computer without any involvement of the "host" computer.
>
> That's the way it normally works. I'm running ICS on a Win 98 SE box with
a
> software firewall and then running two ICS clients (Win 2000 Pro and Win
XP
> Home) behind that gateway. Each of these machines has its own software
> firewall.
> >
> > Is this possible att all, or am I reaching into thin air?
>
> Sure, it's quite possible. Are you experiencing some particular problem?
>

The problem that bothers me the most is that I have to add every FTP i
connect to to the trusted zone on the gateway firewall, I'm also having
trouble running an ftp-server on my(the client) computer, although I don't
know if that problem has to do with the firewall. So basicly I want the
firewall on the gateway to allow both inbound and outbound traffic to the
internet from the LAN.

Do you know how I configure the ICS to permit the pass-through information
you spoke of in the beginning of the post, or do you know where I can find
information on it?



Relevant Pages

  • RE: Client not acquiring IP address from ICS server
    ... specifically say the gateway puter must have an ip set to 192.168.0.1. ... Have you used any registry network ... Either way ics shouldn't stop it getting online. ... other computers shares its probably the firewall. ...
    (microsoft.public.windowsxp.network_web)
  • Re: Configuring a VPN client for a dlink dfl800 firewall
    ... LAN because I have to set it up before connecting it to the LAN and to ... The client is Net Defend v 1.03...which looks like the one ... I did something wrong on the firewall or forgot something. ... So the default gateway is the firewall itself, ...
    (comp.security.firewalls)
  • Re: NAT client ping request timed out
    ... When you enable NAT on the ... you automatically enable the Basic Firewall. ... running firewalls on the client machines, ... I didn't have a default gateway set on that private NIC. ...
    (microsoft.public.windows.server.networking)
  • ZAP and ICS settings
    ... My set-up is a W2000 professional machine acting as ICS gateway to a LAN ... Problem is on the NT client box. ...
    (comp.security.firewalls)
  • Re: Configuring Norton...
    ... this means that you're on a client machine running behind an ICS ... then the NIS 2002 firewall on the ICS gateway box is only protecting ...
    (comp.security.firewalls)