Best way to secure win2k from internet attacks

[Bartek]

We have 8 computers running win2k in LAN, without server.
We are attempting to conect to the internet via DSL
connection, and still without server - what is the best
way to secure all computers?

If my question is not "good" due to my "not perfect"
english, please let me now, I'll try to write my question
one more time.

Bartek, Poland

 

[Herb Martin]

We have 8 computers running win2k in LAN, without server.

We are attempting to conect to the internet via DSL
connection, and still without server - what is the best
way to secure all computers?

If my question is not "good" due to my "not perfect"
english, please let me now, I'll try to write my question
one more time.

You need a NAT (network address translating router);
either a separate box -- many DSL 'routers' offer this,
or using a Win2000 class machine you can enable ICS
on Pro or use the "NAT" product on Server.

All of these provide "Network Address Translation" to
enable "Internet Connection Sharing" despite the fact
that each product name sounds different.

A separate solution or Win2000 Server with NAT is
probably better.

Note: This is NOT a full security solution, just the
beginning of your connectivity with limited isolation
from outside INITIATED attacks except against
the NAT.

 

[Alex Ramos]

best way....take it off the internet....

seriously get yourself a hardware firwall like a netscreen
5xp this unit goes after the dsl modem

dsl modem-> netscreen (or other hardware firewall) ->
switch -> 8pcs

Alex Ramos