can't see network when the XP firewall is on

[Fenton]

Hello experts,

This has been bugging me for a while. I have an Windows XP laptop.
Whenever I turn on the build-in firewall on the Network connection, I can
not communicate with any network computers (not even the DHCP server).
However, after I disable the firewall, all the computers in the workgroup
reappeared!
Anyone knows why is this? Do I have to forward some ports to get it to work
with the firewall on?

Any help is appreciated.
Fenton

 

[Lance]

XP Service Pack 1 or 2?

For Service Pack 2, set the firewall to allow "File and Printer Sharing"
For Service Pack 1 allow ports 139 & 445 (TCP) and 137 & 138 (UDP), I
can't remember if SP1 can set a net mask for these ports. If it can, set
it to your local network.

None of the above is related to your DHCP problem. This may be another
problem entirely.

Lance
*****


Fenton thought carefully and wrote on 9/18/2004 9:37 AM:

 

[Chuck]

Hello experts,

This has been bugging me for a while. I have an Windows XP laptop.
Whenever I turn on the build-in firewall on the Network connection, I can
not communicate with any network computers (not even the DHCP server).
However, after I disable the firewall, all the computers in the workgroup
reappeared!
Anyone knows why is this? Do I have to forward some ports to get it to work
with the firewall on?

Fenton,

If Windows Firewall is enabled, you need to enable the File and Printer Sharing
exception to have browsing, or file and printer sharing, working.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Fenton]

Thanks Lance,

I am using XP SP1. So I have to forward those 4 ports to the localhost,
right? Okay, but does that suggest that I am now visitable to the whole
network? Is there anyway that only I can protect my machine while being
able to use the network resource. The reason is that I need to access one
public folder in the network at work; however, I don't want anyone being
able to connect to my laptop. Can it be done?

Thanks again
Fenton

 

[Lance]

The built-in firewall isn't really meant for the kind of fine tuning you
need at work. It's really sort of a "one size fits all" solution and
only works in one direction (everything goes out, block stuff trying to
get in).

However third-party firewalls are much more capable. Personally, I am
familiar with Kerio 2.1.5. It will allow very close control of what you
let in and out.

I stick with this older version Of Kerio because it doesn't have all the
bells and whistles that Kerio 4 has (and turns off after the 30 day
trial and gets in the way thereafter). But you must understand ports to
really fine tune it.

I'm sure that there's a download site somewhere that still has Kerio
2.1.5 around.

Lance
*****



Fenton thought carefully and wrote on 9/18/2004 1:32 PM: