Re: Firewall Question

From: Bruce Chambers (bchambers_at_nospamcableone.net)
Date: 03/09/04 

Date: Mon, 8 Mar 2004 20:54:11 -0700

Greetings --

    WinXP's built-in firewall is not designed to be used on internal
LAN connections. The _only_ connection on which you should have ICF
enabled is the direct connection to the Internet.

Internet Firewalls Can Prevent Browsing and File Sharing
http://support.microsoft.com/default.aspx?scid=kb;EN-US;298804

Bruce Chambers 

--
Help us help you:
http://dts-l.org/goodpost.htm
http://www.catb.org/~esr/faqs/smart-questions.html
You can have peace.  Or you can have freedom.  Don't ever count on 
having both at once. -- RAH
"Terry" <gobeyondgobeyond@REM0VE.yahoo.com> wrote in message 
news:MPG.1ab660d6fc31c62989691@news.tc.umn.edu...
> Hi,
>
> I wonder if I should activate the Internet Connection Firewall for 
> the
> following scenario.
>
> Fast internet access is provided by a cable modem for a small 
> office.
> The modem is connected to a Linksys router which doesn't have a 
> firewall
> built in.  Three XP Pro machines (always-on) connect to the internet
> directly through this Linksys router.  The router does have a few 
> ports
> open through port forwarding so that these office machines can be
> accessed from home using Remote Desktop.  The 3 machines are in a 
> local
> network with IP 192.168.x.x.  One of the machine will accept VPN
> connection from the outside.
>
> Question:  Should the Internet Connection Firewall be activated on 
> the 3
> office machines?  Since any intrusion attempts have to get past the
> router and the router only has a couple of ports open, I thought it
> would be okay to not enable the firewall.
>
> Your insight is greatly appreciated!
>
> Terry

Relevant Pages

  • Re: Serious Security Issue in Windows XP SP2s Firewall
    ... Subject: AW: Serious Security Issue in Windows XP SP2's Firewall ... If you update a WinXP SP-1 with enabled Internet ... Connection Firewall ...
    (Focus-Microsoft)
  • Re: Big hole??
    ... > firewall then even they can't get in, ... > supposedly safe SP2 for Windows XP invites any Internet ... > Connection Sharing of the PC has to be disabled. ... > in fact is a common configuration and not a rare sight. ...
    (microsoft.public.windowsxp.general)
  • Re: Remote telnet through firewall failing
    ... >> I have not found internet telnet to be the worst of the various security ... I was amazed that after months on the internet (directly to ... no firewall) there was no discernible problems. ... have over 250,000 BSD machines for their hosting services. ...
    (comp.unix.sco.misc)
  • Big hole??
    ... do you run a firewall? ... supposedly safe SP2 for Windows XP invites any Internet ... Connection Sharing of the PC has to be disabled. ... visible in their network at home: ...
    (microsoft.public.windowsxp.general)
  • RE: Serious Security Issue in Windows XP SP2s Firewall
    ... file and printer sharing is available for network login from any network (I ... Internet Connection Sharing of the PC has to be disabled." ... Serious Security Issue in Windows XP SP2's Firewall ...
    (Focus-Microsoft)