Windows Firewall - Dual Homed PC

[Guest]

Is it possible on XP Pro SP2 to use the Windows Firewall to prevent ANY
traffic going from one LAN to another in a dual homed PC?

I use the PC to admin two seperate networks, but don't want it to be the
'weakest link' as it were.

 

[Steven L Umbach]

Make sure that the XP Pro computer is not configured as a router. Use the
command ipconfig /all to see if IP routing is enabled or not and by default
it should not be. The problem is that even with routing disabled if your
computer became infected with a worm it could still hop networks if Client
for Microsoft networks is enabled on both adapters which it probably is
since you are managing two networks with it. If you filtered access for
outgoing ports for Client for Microsoft Networks then you could not manage
the computers via SMB using Computer Management, etc. Disabling file and
print sharing on your computer would greatly reduce the chance of getting a
worm as long as you used that computer only for admin work and not browsing
the internet/reading email etc. --- Steve