dial up sharing not working all else is

[Harold]

I have two computers, both running XP with the most recent patches
applied.

I have installed a linksys wireless boroadband router on the first,
although at this time I do not have broadband access.

This router is conneted to the ethernet connection on the computer
using the first port, not the boraodband port, on the router.

The second computer has a linksys USB wirless adaptor.

I used the wizzard to set up the home network.

The first machine is assigned IP address 192.168.0.1 and the second
192.168.0.3.

Each machine sees the other. They can ping each other. They share
files and printers very well.

The first machine is set to allow the internet connection, dial up, to
be shared and in fact the control pannel shows that it is firewalled,
shared and connected.

The second is set to use the first machine as its access. COntrol
pannel shows me the connection as a gateway and shows me the
connection status, speed, etc.

The second machine has the default gateway and DNS set to 192.168.0.1.

When I try and access the internet from the second machine I time out.

The firewall is the default MS firewall so I even disabled that on
both machines. It did not help.

What else needs to be done here?

 

[James Egan]

What else needs to be done here?

It's not immediately obvious from your post but it may be that you are
running two conflicting dhcp servers.

Switch dhcp off on the router and let the ics host handle the client's
configuration or configure them both statically.


Jim.

 

[Chuck]

I have two computers, both running XP with the most recent patches
applied.

I have installed a linksys wireless boroadband router on the first,
although at this time I do not have broadband access.

This router is conneted to the ethernet connection on the computer
using the first port, not the boraodband port, on the router.

The second computer has a linksys USB wirless adaptor.

I used the wizzard to set up the home network.

The first machine is assigned IP address 192.168.0.1 and the second
192.168.0.3.

Each machine sees the other. They can ping each other. They share
files and printers very well.

The first machine is set to allow the internet connection, dial up, to
be shared and in fact the control pannel shows that it is firewalled,
shared and connected.

The second is set to use the first machine as its access. COntrol
pannel shows me the connection as a gateway and shows me the
connection status, speed, etc.

The second machine has the default gateway and DNS set to 192.168.0.1.

When I try and access the internet from the second machine I time out.

The firewall is the default MS firewall so I even disabled that on
both machines. It did not help.

What else needs to be done here?

Harold,

Please start by providing ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

Is DHCP still enabled on the router (disable it). What is the LAN IP address of
the router (can't use 192.168.0.1).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[Harold]

Harold,

Please start by providing ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

Is DHCP still enabled on the router (disable it). What is the LAN IP address of
the router (can't use 192.168.0.1).

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

ipconfig frome ach machine follows;


Windows IP Configuration

Host Name . . . . . . . . . . . . : BREAKFAST
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Unknown
IP Routing Enabled. . . . . . . . : Yes
WINS Proxy Enabled. . . . . . . . : No

PPP adapter earthlink2:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : WAN (PPP/SLIP) Interface
Physical Address. . . . . . . . . : 00-53-45-00-00-00
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 4.225.214.203
Subnet Mask . . . . . . . . . . . : 255.255.255.255
Default Gateway . . . . . . . . . : 4.225.214.203
DNS Servers . . . . . . . . . . . : 207.69.188.187
207.69.188.186
NetBIOS over Tcpip. . . . . . . . : Disabled

Ethernet adapter Local Area Connection:

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Realtek RTL8139 Family PCI
Fast Ethernet NIC
Physical Address. . . . . . . . . : 00-40-2B-41-A6-C7
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.1
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . :




Windows IP Configuration

Host Name . . . . . . . . . . . . : STUDY
Primary Dns Suffix . . . . . . . :
Node Type . . . . . . . . . . . . : Mixed
IP Routing Enabled. . . . . . . . : No
WINS Proxy Enabled. . . . . . . . : No

Ethernet adapter Wireless Network Connection :

Connection-specific DNS Suffix . :
Description . . . . . . . . . . . : Linksys Wireless-G USB
Network Adapter #2
Physical Address. . . . . . . . . : 00-0F-66-14-67-E4
Dhcp Enabled. . . . . . . . . . . : No
IP Address. . . . . . . . . . . . : 192.168.0.3
Subnet Mask . . . . . . . . . . . : 255.255.255.0
Default Gateway . . . . . . . . . : 192.168.0.1
DNS Servers . . . . . . . . . . . : 192.168.0.1

 

[Harold]

It's not immediately obvious from your post but it may be that you are
running two conflicting dhcp servers.

Switch dhcp off on the router and let the ics host handle the client's
configuration or configure them both statically.


Jim.

I believe that I have them both handled statically if this is what you
mean by setting the first to 192.168.0.1 and the second to
192.168.0.3.

 

[Harold]

Harold,

Please start by providing ipconfig information for each computer.
Start - Run - "cmd". Type "ipconfig /all >c:\ipconfig.txt" into the command
window - Open c:\ipconfig.txt in Notepad, copy and paste into your next post.

Is DHCP still enabled on the router (disable it). What is the LAN IP address of
the router (can't use 192.168.0.1).

Not sure.

Why would i need one anyway. When I ahve set networks like this in
the past I have not worried about such an address and do remember that
everythign else is workign. I can even ping one machone from the
other.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

And I did provide the ipconfig /all stuff

 

[Chuck]

Not sure.

Why would i need one anyway. When I ahve set networks like this in
the past I have not worried about such an address and do remember that
everythign else is workign. I can even ping one machone from the
other.

Harold,

Correct me if I'm wrong.

You're running dialup internet service from Breakfast, sharing the internet
service by running ICS. Breakfast and Study are connected thru the Linksys;
Breakfast thru a LAN (wired) port, Study wirelessly.

IOW, you're using the Linksys as a hub to connect the two computers. ICS is a
software NAT router. ICS includes its own DHCP server, so you must disable the
DHCP server on the Linksys. ICS assigns the LAN port on Breakfast to
192.168.0.1; if the Linksys normally uses this address for its LAN port, this
must be changed. You can't have both Breakfast and Linksys using the same ip
address.

You also should enable the DHCP client on Study, so it can get the proper
settings from the ICS DHCP server.

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

 

[James Egan]

I believe that I have them both handled statically if this is what you
mean by setting the first to 192.168.0.1 and the second to
192.168.0.3.

OK.

Ensure the private ip address of the router is not the same as either
of the pc's and enter the addresses of your isp's name servers for dns
instead of 192.168.0.1


Jim.

 

[Harold]

OK.

Ensure the private ip address of the router is not the same as either
of the pc's and enter the addresses of your isp's name servers for dns
instead of 192.168.0.1


Jim.

My ISP instructs that we set to "obtain DNS address automatically".

And as to the IP address of the router. I am not sure what it is but
doesn't the fact that each machine can ping the other without problem
indicate that this is not a problem.

 

[Harold]

Harold,

Correct me if I'm wrong.

You're running dialup internet service from Breakfast, sharing the internet
service by running ICS. Breakfast and Study are connected thru the Linksys;
Breakfast thru a LAN (wired) port, Study wirelessly.

You are correct that I am using the LAN connection of the Breakfast to
connect to the linksys router and the Study is connected to the
linksys wireless adaptor via USB

IOW, you're using the Linksys as a hub to connect the two computers. ICS is a
software NAT router. ICS includes its own DHCP server, so you must disable the
DHCP server on the Linksys. ICS assigns the LAN port on Breakfast to

I do not believe that it is enabled.

192.168.0.1; if the Linksys normally uses this address for its LAN port, this
must be changed. You can't have both Breakfast and Linksys using the same ip
address.

Just to be certain that there was not a conflict I changed breakfast
to 192.168.0.2 and left study on 192.168.0.3 I reset the default so
that the gateway expected by Study was the .0.2 address not the old
..0.1 but this did not help.

You also should enable the DHCP client on Study, so it can get the proper
settings from the ICS DHCP server.

Where and how?

Cheers,
Chuck
Paranoia comes from experience - and is not necessarily a bad thing.

BTW, two things that I do note that I had not noticed before:

1) since makign these most recent changes the 'network connections' on
study no longer shows the connection through breakfast

2) when I do try and access the internet from sudy I do see activity
on the router.

 

[Chuck]

You are correct that I am using the LAN connection of the Breakfast to
connect to the linksys router and the Study is connected to the
linksys wireless adaptor via USB


I do not believe that it is enabled.


Just to be certain that there was not a conflict I changed breakfast
to 192.168.0.2 and left study on 192.168.0.3 I reset the default so
that the gateway expected by Study was the .0.2 address not the old
.0.1 but this did not help.



Where and how?




BTW, two things that I do note that I had not noticed before:

1) since makign these most recent changes the 'network connections' on
study no longer shows the connection through breakfast

2) when I do try and access the internet from sudy I do see activity
on the router.

Harold,

Let's try again.

Your internet service is connected to Breakfast. Breakfast connects to the
Linksys router by a LAN port. Study also connects to the Linksys router,
wirelessly by USB.

If Breakfast is going to supply internet service to Study, you need to run a NAT
router (ICS), or a proxy server, on Breakfast. You can't use the Linksys to
share the internet. You have to share it on Breakfast, where it starts out.

You can connect Breakfast and Study together, using the router, but you can't
use the router as a router. When you do that, and try to access the internet
from Study, the router tries to provide internet service thru its WAN port,
which is not connected. You can only use the router as a hub or WAP.
1) Disable the DHCP server on the router.
2) Change the ip address of the router LAN port to 192.168.0.99.
3) Enable ICS on Breakfast.
4) Enable the DHCP client on Study ("Obtain an IP address automatically" and
"Obtain DNS server address automatically").

Once you get this working, please secure your LAN. With a wireless LAN, your
network extends far outside your front door - maybe a couple miles to the
nearest shopping center parking lot or coffeehouse.

Here's a story about somebody's very stupid wireless neighbor. Don't expect all
wireless neighbors to be this stupid.
<http://www.canoe.ca/NewsStand/LondonFreePress/News/2003/11/22/264890.html>.

The point is, you need to protect a wireless LAN with more precautions than just
the NAT firewall.

Change the router management password, and disable remote (WAN) management.

Enable WEP / WPA. Use non-trivial (non-guessable) values for each. (No "My dog
has fleas").

Enable MAC filtering.

Install a software firewall on every computer connected to a wireless LAN.
Configure the firewall for file sharing only for the subnet.

Don't disable SSID broadcast - some configurations require the SSID broadcast.
But change the SSID itself - to something that doesn't identify you, or the
equipment.

Enable the router activity log. Examine it regularly. Know what each
connection listed represents - you? a neighbor?.

Use non-trivial accounts and passwords on every computer connected to a wireless
LAN. Disable or delete Guest userid, if possible (XP Home is a bad choice
here). Rename Administrator, to a non-trivial value, and give it a non-trivial
password. Never use the Administrator renamed account for day to day
activities, only when intentionally doing administrative tasks.

Stay educated - know what the threats are. Newsgroups alt.internet.wireless and
microsoft.public.windows.networking,wireless are good places to start.

For wireless LANs properly setup, I'd also recommend that you disable DHCP and
manually assign individual addresses. Then open the firewalls only to the
individual addresses, NOT the subnet. But you can't do this with ICS. :-(

Cheers,
Chuck

 

[James Egan]

My ISP instructs that we set to "obtain DNS address automatically".

That's for the dialup (DHCP) connection to connect to the ISP. If you
are using static addressing on your LAN (as opposed to automatic by
DHCP) then you need to enable dns on the ics client and tell it about
the nameservers. You might get away with using the ICS host for the
nameserver address but since your connection is not working, using the
isps nameservers directly is something you might try.

And as to the IP address of the router. I am not sure what it is but
doesn't the fact that each machine can ping the other without problem
indicate that this is not a problem.

If you are not sure what is going on, your best bet is to start again
as suggested by Chuck and follow the step by step instructions he has
posted. That automatic configuration option is better than the static
one you are currently trying to use.


Jim.

 

[Harold]

That's for the dialup (DHCP) connection to connect to the ISP. If you
are using static addressing on your LAN (as opposed to automatic by
DHCP) then you need to enable dns on the ics client and tell it about
the nameservers. You might get away with using the ICS host for the
nameserver address but since your connection is not working, using the
isps nameservers directly is something you might try.


If you are not sure what is going on, your best bet is to start again
as suggested by Chuck and follow the step by step instructions he has
posted. That automatic configuration option is better than the static
one you are currently trying to use.


Jim.

I hae in fact started again and followed Check's instructions. That
is how I am where I am.

 

[Chuck]

I hae in fact started again and followed Check's instructions. That
is how I am where I am.

Harold,

Where are you? Do both computers have internet access yet?

 

[Harold]

I have two computers, both running XP with the most recent patches
applied.

I have installed a linksys wireless boroadband router on the first,
although at this time I do not have broadband access.

This router is conneted to the ethernet connection on the computer
using the first port, not the boraodband port, on the router.

The second computer has a linksys USB wirless adaptor.

I used the wizzard to set up the home network.

The first machine is assigned IP address 192.168.0.1 and the second
192.168.0.3.

Each machine sees the other. They can ping each other. They share
files and printers very well.

The first machine is set to allow the internet connection, dial up, to
be shared and in fact the control pannel shows that it is firewalled,
shared and connected.

The second is set to use the first machine as its access. COntrol
pannel shows me the connection as a gateway and shows me the
connection status, speed, etc.

The second machine has the default gateway and DNS set to 192.168.0.1.

When I try and access the internet from the second machine I time out.

The firewall is the default MS firewall so I even disabled that on
both machines. It did not help.

What else needs to be done here?

Hey guys, thanks for all the help. Interestingly the problem was
nothing like any of us thought here.

Problem was as follows:

Previously I had zonealarm on each computer
When I installed the networking I switched off zonealarm and enabled
MS Firewall
It turns out that the zonealarm still left something in place that was
stopping DNS packets.
I uninstalled zonealarm rather than just disabling it and all works.

The clue was that I could ping external sites by ip address from the
second machine. SOmehow this left over from zonealarm was stopping
DNS packets from getting through.

 

[James Egan]

Problem was as follows:

Previously I had zonealarm on each computer

Glad you got it sorted.

It's a pity you didn't mention zonealarm a little earlier. Uninstall
instead of disable is very high up on the things_to_try list. You're
not the first and certainly won't be the last to be caught out by that
one.


Jim.