Re: Internet Connection Firewall

From: David Beder [MSFT] (dbeder_at_online.microsoft.com)
Date: 10/17/03


Date: Fri, 17 Oct 2003 00:00:59 -0700

You actually might want to keep the firewall on in a lan environment. Just
as you want to keep viruses out on an internet link, you want to keep any
out that are running around the lan.
You'll then want to open ports for specific services needed to be accessed.
Typical File and Print ports:
UDP 137 - netbios name service
UDP 128 - netbios datagram service
UDP 445 - SMB over UDP
TCP 139 - Nebios session service
TCP 445 - SMB over TCP

Check various product documentation to find ports you need to open for any
other services you want. EG TCP 80/443 TCP21 for web stuff. Some of these
are pre-defined for you in the ICF settings dialog.

-- 
David
Microsoft Windows Networking
This posting is provided "AS IS" with no warranties, and confers no rights.
"Bruce Chambers" <bchambers@nospamcableone.net> wrote in message
news:voufv1qp0m6r87@corp.supernews.com...
> Greetings --
>
>     The built-in firewall is designed to be used only on a direct
> connection to the Internet, not on any internal LAN connections.
> Disable it for the internal LAN connection(s).
>
>
> Bruce Chambers
>
> --
> Help us help you:
> http://dts-l.org/goodpost.htm
> http://www.catb.org/~esr/faqs/smart-questions.html
>
> You can have peace.  Or you can have freedom.  Don't ever count on
> having both at once. -- RAH
>
>
> "Kenneth Palmer" <anonymous@discussions.microsoft.com> wrote in
> message news:250c01c39347$e1730b00$7d02280a@phx.gbl...
> > Yesterday I saw an ad in Windows Update for a firewall.  I
> > installed it on two computers.  I told my wife about it,
> > and told her to install it on her computers.  She read the
> > instructions carefully and found it wouldn't allow you to
> > share files or printers.  We are on Server 2003 and must
> > share files and printers.
> >
> > Do you have any instructions to allow sharing and it not,
> > I need to uninstall the firewall and need instructions on
> > how to do it.
>
>


Relevant Pages

  • RE: firewall
    ... You need to do a lot of reading about ipfw ... IPFW is the only firewall available to FBSD, ... rules do not function correctly on a DSL or cable internet ... @320 pass in quick on rl0 proto tcp from 63.70.155.0/24 to any port ...
    (freebsd-questions)
  • RE: Firewall / Internet Gateway Config Fails
    ... in the address of it's internet address so it can be routed on the net. ... Firewall / Internet Gateway Config Fails ... configured correctly shouldn't the lan clients be able ...
    (RedHat)
  • Re: RD works on LAN not across Internet
    ... RD works fine within my LAN but not across the ... I turned off Windows Firewall and NIS on all computers. ... >>> settings to fully use DHCP to access the Internet. ...
    (microsoft.public.windowsxp.work_remotely)
  • Re: Internet Connection Sharing AND networking?
    ... >> XP machine the same as that used on the windows 98 machine. ... I can get to the Internet through ... >I cannot disable the firewall for just the LAN connection. ...
    (microsoft.public.windowsxp.network_web)
  • RE: Firewall / Internet Gateway Config Fails
    ... Firewall / Internet Gateway Config Fails ... all the machines on the lan are already configured to ...
    (RedHat)