Firewalls and Internet Connection Sharing (ICS)

[Philip Herlihy]

1) Does a firewall like ZoneAlarm, running on an ICS host, protect the
clients of that host?

2) Now that I have a wireless gateway modem, connected directly to my ADSL
line and acting as DHCP server for all my client machines, should I treat
the local subnet (192.168.1.*) as a trusted or hostile zone?

 

[Steve Winograd [MVP]]

1) Does a firewall like ZoneAlarm, running on an ICS host, protect the
clients of that host?

Not all firewalls are compatible with ICS on the host. To the best of
my knowledge, the free version of ZoneAlarm is incompatible.

A compatible firewall on the host protects the host and the clients
from undesired incoming traffic from the Internet. ZoneAlarm on the
host protects the host, but not the clients, from undesired outgoing
traffic to the Internet.

2) Now that I have a wireless gateway modem, connected directly to my ADSL
line and acting as DHCP server for all my client machines, should I treat
the local subnet (192.168.1.*) as a trusted or hostile zone?

Trusted, assuming that you trust your own computers.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Philip Herlihy]

--
####################
## PH, London
####################
....