program deactivates xp sp2 firewall

[Felix]

Hello,
I have a small home network (3 computers), I use NAT32 to share my internet
connection. Since I have installed
SP2 over XP pro, each time I start NAT32 this will kill the firewall (the
corresponding service is stopped).
This is done silently without any pop up error message, nothing in the event
log.
NAT32 has a problem but SP2 too ...
It should not be possible for a program to kill the firewall !
Felix

 

[DL]

Why are you using a third party app, when their is inbuilt support for
sharing a connection?
What type of connection, ie dial up/cable/dsl
External/internal modem?

 

[Felix]

I have used NAT32 for ages without any problem.
My connection is ADSL/PPPOE via an external ethernet modem.
After restarting the firewall everything works fine.
My point is that the firewall has been killed by way of an application bug,
and no warning!
This sounds pretty scary to me.
Felix

 

[DL]

Well I believe some people have had problems with AV/Firewall software and
other software after having applied SP2.
It would seem likely that there is a problem therefore with NAT32 and SP2,
as to who's problem, well thats another question.
Having checked the NAT32 site it would appear that the connection to the
other pc's is dependent on the NAT32 pc, ie shutdown that pc and the others
lose connection, is that correct?

 

[Felix]

Hi DL,
To answer your question: Yes, NAT32 runs pretty much like ICS.
If you look at their site they claim to be able to run alongside ICS.
Nat32 has a command: "ICS OFF" which should disable ICS and as an
unvoluntary side effect stops the firewall service.
I believe that NAT32 issues that command when it starts, this side effect
did not exist under SP1.
This a bug in NAT32, OK.
The bug in SP2 is that a legitimate program (not a worm or virus) can
inadvertently knock down the firewall without notification to the user.
Actually I ran my PC a full day with the firewall service stopped and
without knowing it !
What kind of security is that ?
Felix

 

[DL]

If it runs similar to ICS would'nt you be better off with a nat/reuter?
ie modem -> reuter -> pc's then the connection is completely independent
just a thought

 

[Felix]

Hi DL,
A router would do (a bit oversized for 3 PCs), ICS would do, but I bought
NAT32 ,it worked with SP1 and I want to use it.
Thanks for your answer.
Felix

 

[DL]

A Reuter is cheap, at least it is here, comes complete with a NAT firewall,
means each sys is completely independant, allows for full throughput on each
sys, and no, is not oversized for 3 PCs
but whatever yr happy with.