firewall(ICF) problem !

[Jack]

How do correctly configure Windows XP firewall(ICF)to
provide file sharing and printing?
Microsoft explanation is extremely vague and unclear..
More exactly: we have 3 PCs in our small network; each PCs
connected to Internet via LAN, each PC have own local IP.
I need manually open some ports to provide printing &
sharing. I need go to "Advanced Settings" tab, "Services"
tab, then click Add. Could I type more than one address in
box "Name or IP address of the computer hosting this
service on your network"? How I should separate addresses -
with comma(,) or point with comma(?

 

[XPUSER]

How do correctly configure Windows XP firewall(ICF)to
provide file sharing and printing?
Microsoft explanation is extremely vague and unclear..
More exactly: we have 3 PCs in our small network; each PCs
connected to Internet via LAN, each PC have own local IP.
I need manually open some ports to provide printing &
sharing. I need go to "Advanced Settings" tab, "Services"
tab, then click Add. Could I type more than one address in
box "Name or IP address of the computer hosting this
service on your network"? How I should separate addresses -
with comma(,) or point with comma(?

=======================================================
The Windows XP Internet Connection Firewall is limited in scope.
It is meant to be used on ONE (stand alone) computer for its Internet
connection.
It is not meant to be used on a Local Area Network and will prevent
File and Printer Sharing on that network.

You must disable the XP ICF on all of your computers.
You could then install and correctly configure a third-party Firewall
program
such as Zone Alarm Pro. Such third-party firewalls will work on a LAN.
=======================================================

 

[Guest]

It proves that Win XP is unreliable, inconvenient system
for small private network! I regret, that have spent money
to purchase this Windows XP worthless system. When
firewall is turned on, NO filesharing and printing was
available in a private small office network.
There are written in Microsoft article
called "Troubleshooting Internet Connection Firewall on
Microsooft Windows XP" describes so called "Common
Problems with ICF".
Literally:
File and Print Sharing Does Not Work.
--------------------------------------
...If you cannot access shared files or printers on a
computer that has ICF enabled on a connection attached to
a private small office/home office network, you must
either create a set of service definitions that allow file
and print sharing traffic or you must use a different
protocol..
"Adding Service Definitions for File and Print Sharing
Traffic"
-------------------
...To allow file and print sharing traffic, create and
enable the following service definitions.. In all of these
service definitions, use the name of the local computer in
Name or IP address..

WHY I CAN NO TYPE HERE ALL MY NETWORK PCs?

I vote for Linux!
=============================

 

[XPUSER]

It proves that Win XP is unreliable, inconvenient system
for small private network! I regret, that have spent money
to purchase this Windows XP worthless system. When
firewall is turned on, NO filesharing and printing was
available in a private small office network.
There are written in Microsoft article
called "Troubleshooting Internet Connection Firewall on
Microsooft Windows XP" describes so called "Common
Problems with ICF".
Literally:
File and Print Sharing Does Not Work.
--------------------------------------
..If you cannot access shared files or printers on a
computer that has ICF enabled on a connection attached to
a private small office/home office network, you must
either create a set of service definitions that allow file
and print sharing traffic or you must use a different
protocol..
"Adding Service Definitions for File and Print Sharing
Traffic"
-------------------
..To allow file and print sharing traffic, create and
enable the following service definitions.. In all of these
service definitions, use the name of the local computer in
Name or IP address..

WHY I CAN NO TYPE HERE ALL MY NETWORK PCs?

I vote for Linux!
=============================



work on a LAN.

============================================================
Hope Linux works out for you. Of course you will still need a third-party
firewall anyway.
============================================================

 

[Curt]

It proves that Win XP is unreliable, inconvenient system
for small private network! I regret, that have spent money
to purchase this Windows XP worthless system. When
firewall is turned on, NO filesharing and printing was
available in a private small office network.
There are written in Microsoft article
called "Troubleshooting Internet Connection Firewall on
Microsooft Windows XP" describes so called "Common
Problems with ICF".
Literally:
File and Print Sharing Does Not Work.
--------------------------------------
..If you cannot access shared files or printers on a
computer that has ICF enabled on a connection attached to
a private small office/home office network, you must
either create a set of service definitions that allow file
and print sharing traffic or you must use a different
protocol..
"Adding Service Definitions for File and Print Sharing
Traffic"
-------------------
..To allow file and print sharing traffic, create and
enable the following service definitions.. In all of these
service definitions, use the name of the local computer in
Name or IP address..

WHY I CAN NO TYPE HERE ALL MY NETWORK PCs?

I vote for Linux!
=============================

Maybe you should read the help file on your computer for ICF. It is an
Internet Connection Firewall (hence the acronym ICF). The help clearly
states that ICF should only be run on a computer directly connected to the
Internet. ICF should be disabled for file and print sharing on a LAN.

So you are trying to use a firewall designed for a single purpose to
perform another function.

 

[Ken Wickes [MSFT]]

I don't understand, the web page you refer to tells you the ports to open
for F&P sharing. It sounds like you are using ICS and want the machine
behind the ICS host to be available to machines not behind the ICS host.
This isn't possible because of the file sharing protocol, and will be true
of any NAT.

 

[MSoftSucks]

I agree. Forget about XP and ICS. ICS is worthless, and XP is a pretty
easy target to compromize on the Internet, even with ICS turned on. For
about $40-50, you can buy a pretty descent firewall appliance (Netgear,
Linksys, Hawkings etc.), that are much more secure, robust and capable.