Why isn't it secure??

[ceviz]

hi there
I had two computers before this week and had no problems on my network. But
now I have 5 pc's and using a hub to connect them all to the
internet(including me). While I had two pc's I used to connect to internet
directly and the other computer was connectiong through my pc. So I had a
network...But now while I choose "I connect internet directly and other
computers also connects to the internet using a hub" Window XP tells me it
is not secure.
What should I to keep my network secure and set my network up again?
Thanks

 

[Steve Winograd [MVP]]

hi there
I had two computers before this week and had no problems on my network. But
now I have 5 pc's and using a hub to connect them all to the
internet(including me). While I had two pc's I used to connect to internet
directly and the other computer was connectiong through my pc. So I had a
network...But now while I choose "I connect internet directly and other
computers also connects to the internet using a hub" Window XP tells me it
is not secure.
What should I to keep my network secure and set my network up again?
Thanks

That option tells the Network Setup Wizard that each computer connects
to the Internet independently through the hub and gets its own public
IP address from your ISP.

It might not be secure because other Internet users can access a
computer through its public IP address unless you take the appropriate
precautions, such as running a properly configured firewall program
on each computer. However, it's hard to set up file and printer
sharing between computers in that configuration.

Are you sure that it's a hub, not a broadband router (residential
gateway)? What's it's make and model number?

To tell whether a computer has a public IP address, right click the
network connection and click Status | Support. If the IP address is
in one of these ranges, it isn't public:

10.0.0.0 - 10.255.255.255
169.254.0.0 - 169.254.255.255
172.16.0.0 - 172.31.255.255
192.168.0.0 - 192.168.255.255

An IP address outside those ranges is public and indicates a possible
security problem.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[marrow]

My connection type is adsl, I have dsl ethernet modem(Corecess 3113 ethernet
ADSL modem) that doesnt have any firewall but has a router I guess. I
plugged it into a hub and all the computer(installed windows XP) are having
connection from the hub. All computers are having a ip's like 10.0.0.x. Also
all the computers has been installed norton internet security(beacuse there
is not firewall in my modem).
This is my case. But I can say all the pc's are using one ip while accesing
the internet like 81.xxx.xxx.xxx
Thank you

p.s.: as i said my modem has a router but has one output so thats why i am
using a hub(which is inca 8port hub)

 

[Steve Winograd [MVP]]

My connection type is adsl, I have dsl ethernet modem(Corecess 3113 ethernet
ADSL modem) that doesnt have any firewall but has a router I guess. I
plugged it into a hub and all the computer(installed windows XP) are having
connection from the hub. All computers are having a ip's like 10.0.0.x. Also
all the computers has been installed norton internet security(beacuse there
is not firewall in my modem).
This is my case. But I can say all the pc's are using one ip while accesing
the internet like 81.xxx.xxx.xxx
Thank you

p.s.: as i said my modem has a router but has one output so thats why i am
using a hub(which is inca 8port hub)

According to this web page, the Corecess 3113 combines an ADSL modem
function with a router and NAT function:

http://www.corecess.com/eng/product/xdsl_corecess3113.asp

Only the router itself has a public (81.xxx.xxx.xxx) IP address, and
it's all that other Internet users can see. They can't see your
computers, which get private (10.0.0.x) IP addresses from the router.

If you use XP's Network Setup Wizard, tell it that the computers
connect to the Internet through a residential gateway. The Wizard's
"hub" option only applies when a DSL (or cable) modem connects
directly to the same hub as the computers, with no router or other NAT
device.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Stuart]

Extending this thread a little:

I've just set up my system this weekend (main PC WinXP
Home, NIC cabled to router (Linksys WRT54G, NAT, firewall
in place) with cable modem connected, plus an old WinME
on wireless 54MB network connection)

Now, I had originally thought to install as "via gateway"
but, in trying to overcome some connectivity issues,
checked the help info which stated the system needed to
have 2 NIC on the main PC for the "gateway" set up....
and, more importantly, the "host" PC would need to be on
in order that the client could access the net?

So, I looked again at the available configurations and
help prompts and thus opted for option with hub (read
router) so that the client can connect even if the XP PC
is not turned on.

In this situation I have a system which is now
functioning, as I expected. What have I missed?

(I'll go search for help on how to firewall this set up -
I've used ZoneAlarm free to-date but I don't think this
can operate in this configuration. Any tips?)
TIA
Stuart

 

[Steve Winograd [MVP]]

Extending this thread a little:

I've just set up my system this weekend (main PC WinXP
Home, NIC cabled to router (Linksys WRT54G, NAT, firewall
in place) with cable modem connected, plus an old WinME
on wireless 54MB network connection)

Now, I had originally thought to install as "via gateway"
but, in trying to overcome some connectivity issues,
checked the help info which stated the system needed to
have 2 NIC on the main PC for the "gateway" set up....
and, more importantly, the "host" PC would need to be on
in order that the client could access the net?

So, I looked again at the available configurations and
help prompts and thus opted for option with hub (read
router) so that the client can connect even if the XP PC
is not turned on.

In this situation I have a system which is now
functioning, as I expected. What have I missed?

(I'll go search for help on how to firewall this set up -
I've used ZoneAlarm free to-date but I don't think this
can operate in this configuration. Any tips?)
TIA
Stuart

There are two types of Internet gateways commonly used in home
networks:

1. A host computer running Internet Connection Sharing. That requires
two network adapters in the host computer: one for the Internet, and
one for the local area network.

2. A broadband router like your Linksys. The Network Setup Wizard
calls it a "residential gateway". Each computer need only one network
adapter.

Hubs and routers perform different functions, and they're not
interchangeable. A hub is simply a connection point for multiple
devices, all of which are on the same network. A router moves traffic
between two different networks: the Internet and a LAN. Most home
broadband routers have a built-in hub or switch on the LAN side to
connect multiple computers.

When you specify the "hub" option, the Network Setup Wizard enables
the Internet Connection Firewall on the computer. That will block
file and printer sharing unless you manually disable the firewall or
open ports in it.

ZoneAlarm free firewall is fine in your configuration. To allow file
and printer sharing, put the local area network subnet in the Trusted
zone.
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com

 

[Stuart]

Steve

Many thanks for the confirmation of the different set
ups. I had disabled the ICF and have to set the Trusted
zone for ZA as you indicate.

Thanks for your time and clearing up my confusion!
Stuart

-----Original Message-----

 

[Steve Winograd [MVP]]

Steve

Many thanks for the confirmation of the different set
ups. I had disabled the ICF and have to set the Trusted
zone for ZA as you indicate.

Thanks for your time and clearing up my confusion!
Stuart

You're welcome, Stuart. I'm glad that I could clear up the subject
for you. In my opinion, the Network Setup Wizard (which is supposed
to make things easy) doesn't describe the options clearly. It's a
little better in the forthcoming Windows XP Service Pack 2.

I've mentioned to some of Microsoft's network software developers that
most home users don't know what "residential gateway" means -- users
and manufacturers call it a "broadband router" or just a "router".
--
Best Wishes,
Steve Winograd, MS-MVP (Windows Networking)

Please post any reply as a follow-up message in the news group
for everyone to see. I'm sorry, but I don't answer questions
addressed directly to me in E-mail or news groups.

Microsoft Most Valuable Professional Program
http://mvp.support.microsoft.com