Firewalls

B

Bill Martin

Is anyone aware of a firewall for XP which allows one to set up a trusted
zone based on network name or host name or some such in addition to IP
address?

Basically I'd like the firewall to open up my laptop to access from a
particular machine on my home wifi network for backup and file sharing, but
to NOT allow access when I travel with wifi. IP address alone is
insufficient as those may be duplicated on other wifi networks.

I'm trying to figure out how one can file share as described without having
to remember to manually turn sharing on/off as one moves the machine around.
For reasons I do not comprehend, Microsoft removed the ability to set
passwords for file sharing in XP Home, despite having the function in Win98.

Thanks.

Bill
 
C

Claymore

Hello Bill,

But no one can share (access) files on your computer unless they have
the same workgroup name. If you name your workgroup something very
unique, the chances of another computer having the same workgroup
name, and the single IP address you've allowed, and getting by your
firewall, and being able to crack your wireless password, are so
remote as to be impossible.
 
M

Malke

Claymore said:
Hello Bill,

But no one can share (access) files on your computer unless they have
the same workgroup name. If you name your workgroup something very
unique, the chances of another computer having the same workgroup
name, and the single IP address you've allowed, and getting by your
firewall, and being able to crack your wireless password, are so
remote as to be impossible.

Please quote at least some of the post to which you are replying. Your
reply is incorrect regarding non-Vista MS operating systems. While the
name of the Workgroup seems to matter in Vista, machines running other
MS operating systems can share files/printers without being in the same
Workgroup, Workgroups being merely a cosmetic and organizational device
and providing no security whatsoever.

Here is the OP's question:

****
Is anyone aware of a firewall for XP which allows one to set up a
trusted zone based on network name or host name or some such in addition
to IP address?

Basically I'd like the firewall to open up my laptop to access from a
particular machine on my home wifi network for backup and file sharing,
but to NOT allow access when I travel with wifi. IP address alone is
insufficient as those may be duplicated on other wifi networks.
****

I believe that the OP can just not set file/printer sharing to ON on the
wireless connection, but there is no way for the computer on the home
network to know whether the laptop is traveling or not. Perhaps what he
wants to do could be managed by creating a new user on the home machine
and the laptop and giving that user alone share privileges. Or defer the
connection to the laptop until he returns home.


Malke
 
B

Bill Martin

Malke said:
I believe that the OP can just not set file/printer sharing to ON on the
wireless connection, but there is no way for the computer on the home
network to know whether the laptop is traveling or not. Perhaps what he
wants to do could be managed by creating a new user on the home machine
and the laptop and giving that user alone share privileges. Or defer the
connection to the laptop until he returns home.


Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User
---------------------------------------------

The problem of course is that I must set the sharing "on" while at home to
do file backups and such. And having to remember to turn it off when I
travel is problematic. Even worse if my wife travels with it.

I guess one kludgey question is whether there's some way to turn Microsoft
firewall file sharing on/off from a command line? Because I do see that the
IPCONFIG/ALL command will return the local network name. I could gin up
software to query the local network name and based on that turn the file
sharing off and run that software each time the machine boots up.

Not an ideal solution, but it would be a vast improvement over relying on my
memory if such command line control is somehow available.

Bill
 
J

Jim Macklin

What about MAC filtering to control which machines can
access WiFi or wired, can reject at the router and again in
a software firewall.


| Claymore wrote:
| > Hello Bill,
| >
| > But no one can share (access) files on your computer
unless they have
| > the same workgroup name. If you name your workgroup
something very
| > unique, the chances of another computer having the same
workgroup
| > name, and the single IP address you've allowed, and
getting by your
| > firewall, and being able to crack your wireless
password, are so
| > remote as to be impossible.
| >
|
| Please quote at least some of the post to which you are
replying. Your
| reply is incorrect regarding non-Vista MS operating
systems. While the
| name of the Workgroup seems to matter in Vista, machines
running other
| MS operating systems can share files/printers without
being in the same
| Workgroup, Workgroups being merely a cosmetic and
organizational device
| and providing no security whatsoever.
|
| Here is the OP's question:
|
| ****
| Is anyone aware of a firewall for XP which allows one to
set up a
| trusted zone based on network name or host name or some
such in addition
| to IP address?
|
| Basically I'd like the firewall to open up my laptop to
access from a
| particular machine on my home wifi network for backup and
file sharing,
| but to NOT allow access when I travel with wifi. IP
address alone is
| insufficient as those may be duplicated on other wifi
networks.
| ****
|
| I believe that the OP can just not set file/printer
sharing to ON on the
| wireless connection, but there is no way for the computer
on the home
| network to know whether the laptop is traveling or not.
Perhaps what he
| wants to do could be managed by creating a new user on the
home machine
| and the laptop and giving that user alone share
privileges. Or defer the
| connection to the laptop until he returns home.
|
|
| Malke
| --
| Elephant Boy Computers
| www.elephantboycomputers.com
| "Don't Panic!"
| MS-MVP Windows - Shell/User
 
B

Bill Martin

The network is wifi whether I'm home or traveling - never wired unless
that's what the hotel happens to have instead of wifi. If I understand your
suggestion correctly (which I may not) then it only works if one network is
wired and the other wireless?

Bill
 
J

Jim Macklin

MAC is machine address code, a unique identification for
each bit of hardware. You can set your router which is part
of the WiFi security to only allow log-on to particular
machines with the correct MAC. You can also turn SSID
broadcasting off so your WiFi router will stay hidden from
casual snoops.

A firewall can also do these things in software on the
computer itself if you want more security.

In public "hotspots" the SSID is broadcast and the WiFi will
accept any log-on. In semi-private/public spots, like the
hotel, you may need a password or even a special WiFi card
with a MAC that has access.

But you need a software firewall in the computer because
without it, when logged in to a public WiFi your computer is
open to the world of hackers and spammers.

You can't control the public hotspots, but you can protect
your machine. At home, you can have more protection because
you control the router/gateway.


| The network is wifi whether I'm home or traveling - never
wired unless
| that's what the hotel happens to have instead of wifi. If
I understand your
| suggestion correctly (which I may not) then it only works
if one network is
| wired and the other wireless?
|
| Bill
| ------------------------------
in message
| | > What about MAC filtering to control which machines can
| > access WiFi or wired, can reject at the router and again
in
| > a software firewall.
| >
| >
| > | > | Claymore wrote:
| > | > Hello Bill,
| > | >
| > | > But no one can share (access) files on your computer
| > unless they have
| > | > the same workgroup name. If you name your workgroup
| > something very
| > | > unique, the chances of another computer having the
same
| > workgroup
| > | > name, and the single IP address you've allowed, and
| > getting by your
| > | > firewall, and being able to crack your wireless
| > password, are so
| > | > remote as to be impossible.
| > | >
| > |
| > | Please quote at least some of the post to which you
are
| > replying. Your
| > | reply is incorrect regarding non-Vista MS operating
| > systems. While the
| > | name of the Workgroup seems to matter in Vista,
machines
| > running other
| > | MS operating systems can share files/printers without
| > being in the same
| > | Workgroup, Workgroups being merely a cosmetic and
| > organizational device
| > | and providing no security whatsoever.
| > |
| > | Here is the OP's question:
| > |
| > | ****
| > | Is anyone aware of a firewall for XP which allows one
to
| > set up a
| > | trusted zone based on network name or host name or
some
| > such in addition
| > | to IP address?
| > |
| > | Basically I'd like the firewall to open up my laptop
to
| > access from a
| > | particular machine on my home wifi network for backup
and
| > file sharing,
| > | but to NOT allow access when I travel with wifi. IP
| > address alone is
| > | insufficient as those may be duplicated on other wifi
| > networks.
| > | ****
| > |
| > | I believe that the OP can just not set file/printer
| > sharing to ON on the
| > | wireless connection, but there is no way for the
computer
| > on the home
| > | network to know whether the laptop is traveling or
not.
| > Perhaps what he
| > | wants to do could be managed by creating a new user on
the
| > home machine
| > | and the laptop and giving that user alone share
| > privileges. Or defer the
| > | connection to the laptop until he returns home.
| > |
| > |
| > | Malke
| > | --
| > | Elephant Boy Computers
| > | www.elephantboycomputers.com
| > | "Don't Panic!"
| > | MS-MVP Windows - Shell/User
| >
| >
|
|
 
B

Bill Martin

I already have done everything proper on my home wifi router -- the issue is
traveling with the laptop.

As I read your note, basically you're saying that I need to have my laptop's
firewall restrict access from other machines based on MAC address. And this
is what I originally asked. Does anyone know of a firewall that would allow
me to do this? Microsoft's apparently does not. Neither do several others
that I've tried. They only allow filtering on IP addresses and not on MAC
addresses.

Bill
------------------
 

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question

Similar Threads


Top