AChung said:
Mr Arnold
Thank you for your details. You're very resourceful and helpful.
Actually, I have "unchecked" Client for MS Network and File Sharing for MS
Network on my Intel PRO connection. Do I have to remove them from the
list?
However, Network Discovery and File Sharing are still shown on the Network
and Sharing Center. Puzzled?
Why do you even care? The computer is behind your router. A machine cannot
network with your machine over the Internet the WAN (Wide Area Network),
because the router is sitting there and those Windows Network Ports on the
router are closed to the outside world. Your machine can only network with
another one of your machines behind the router on the LAN (Local Area
Network). The machine is protected from the Internet due to the router
sitting there in front of the machine.
I wonder if AnalogX Public Server IPSec Configuration v1.00 is
Vista-compatible. As you have it installed into your Vista computer, I
guess
it is feasible. Am I right?
My modem/router has NAT but it is a basic version and cannot be configured
to disable ICMP echo requests (PING) as confirmed by the manufacturer.
Please advise on how to put my machine behind a NAT router. Is there any
configuration required?
Your modem/router is a NAT router. A ping is being dealt with by the router,
from what I understand. It's the router that's responding to it. If a SMURF
or Ping attack is being ran against you, it's directed at the router.
If you have a machine that has been compromised behind the router and it
started doing ping attacks on IP(s)/machine on the LAN, this is where you
should be concerned about the machine and its operating system responding
to pings. And if a compromise of this type has happened behind the router,
then you got other problems other than worrying about some ping attack.
I didn't know that your machine was behind a NAT modem/router. That Gibson
junk only applies to when the machine has a direct connection to a
standalone modem, which is a situation of a router NOT being between the
modem and the computer.
If a router is NOT between the modem and the computer, then the computer has
a direct connection to the Internet, and THAT is the condition where you
should be concerned about all the things that have been talked about between
you and I with these posts.
Your machine is behind a router, and in the grand reality of things, you are
very, very, very, very, very, very small potatoes. You can implement what we
have talked about to your own satisfaction behind the router.
Yes, IPsec with the AnalogX version we have been talking about in the links
I am using on this laptop running Vista, a FW 3rd party personal FW or not,
protecting the WNP(s), un-checking networking services off of the NIC or
dialup connection etc, etc only applies when the laptop has a direct
connection to the Internet. The laptop at this time is connected directly to
the Internet on dialup, so the solutions are implemented to the fullest.
When the laptop is connected to my FW appliance or at one point when I was
using a NAT router and the laptop is connected to the FW appliance or
router, all of the solutions we are talking about are disabled, and none of
the other computers on the LAN have these solutions enabled, because they
are not needed behind either device.
You can use the PFW for outbound protection, as most do that, but all this
other stuff you are concerned about do not apply, because that NAT
modem/router is setting there, and in the grand realilty of things, you are
small potatoes and there is no need for it behind the router.
