firewall manager

[Guest]

I made a 3270 based terminal with XP embedded. For security reasons I have added "Internet Connection Sharing and Firewall" and the little utility "ICFutil.exe" to my image. So I want to enable this firewall with some FBA generic commands.
All of this is ok, but in my logfile there is a message that came from the execution of the command "ICFutil.exe /enable" which says: "Firewall Manager not available".
So the result is that no firewall function seems to work properly.
PS. I do not want to use the macro component "Internet Connection Sharing/Personal Firewall", because than my image is enlarged too much with all kind of components I do not need.
What should I do to let this work fine ?

 

[Sean Gahan]

Johnny,
This is a guess, but I think there may be a dependency on Lsass and
authenticating users for the Winlogon service.


Regards,

Sean Gahan

I made a 3270 based terminal with XP embedded. For security reasons I have

added "Internet Connection Sharing and Firewall" and the little utility
"ICFutil.exe" to my image. So I want to enable this firewall with some FBA
generic commands.

All of this is ok, but in my logfile there is a message that came from the

execution of the command "ICFutil.exe /enable" which says: "Firewall Manager
not available".

So the result is that no firewall function seems to work properly.
PS. I do not want to use the macro component "Internet Connection

Sharing/Personal Firewall", because than my image is enlarged too much with
all kind of components I do not need.

 

[Guest]

Hello Sean,

I have already the LSASS component in my image.
But i am using the minlogon, not the winlogon service.

Kind regards,
Johnny.

 

[Sean Gahan]

Johnny,
I had the same situation with the MiniLogon using Internet Connection
Sharing And Firewall; I was testing just the MiniLogon with the ICFUtil and
having no luck. I had speculated that it was because of account privileges
and authententication; regardless though, in my production image I needed
the .NET Framework which depends on the Windows Logon and now ICF works. If
you have enough drive space, you might try a build suing the WinLogon.

Regards,

Sean Gahan

 

[Guest]

Sean,
I only have 128 Mbyte of flash memory, and now already 95 Mbyte is used for a
small system with only a 3270 emulation application.
I tried the winlogon, but my image increases to much that I cannot test this option.

Kind regards,
Johnny.