XP Firewall Protection Question

[Jack Bruss]

I have 3 computers on a home network. I use a router with a cable modem
going to the router, and the 3 computers connected to the router. My wife,
daughter and I use this simple network to share printers and files and to
access the internet at the same time anytime.

My problem is if I enable XPs firewall protection on any of the 3 computers,
then the computers can't see each other, and they can't share files and
printers.

Does it have to be this way or am I doing something wrong. Do I need the XP
firewall protection if I am using a router?

Thanks,

Jack

 

[Barry Higginbottom]

Does it have to be this way or am I doing something wrong. Do I need the XP
firewall protection if I am using a router?

Jack,

Go to http://www.grc.com/default.htm scroll down and click on the
"ShieldsUp!" link and check out your router, it may have a built in
firewall. My new 3com firewall/router does and gets a perfect score.

I think if you want a software firewall you'll need to download something
like Zone Alarm or Kerio or one of the many other 'free' firewalls
available.

I don't think that the Microsoft offering is any good for this because you
can't tweak it for your setup. (I may be wrong there and if I am I'm sure
someone else will jump in!)

 

[burris]

Jack,

Go to http://www.grc.com/default.htm scroll down and click on the
"ShieldsUp!" link and check out your router, it may have a built in
firewall. My new 3com firewall/router does and gets a perfect score.

I think if you want a software firewall you'll need to download something
like Zone Alarm or Kerio or one of the many other 'free' firewalls
available.

I don't think that the Microsoft offering is any good for this because you
can't tweak it for your setup. (I may be wrong there and if I am I'm sure
someone else will jump in!)

I think you are correct. The M$ firewall doesn't want to work with a lan.

burris

 

[5bli]

I think you are correct. The M$ firewall doesn't want to work with a lan.

burris

You can use the MS Firewall (ICF) in this situation somewhat, but
you need to be clear on what you're trying to accomplish. The major
limitation problem you have here is that ICF doesn't distinguish local
traffic from Internet traffic. You can enable netbios over tcp traffic,
for example, to do windows file sharing, but if you do, then its enabled
coming in from both other local machines, and coming in from the Internet.
Of course, you can stop netbios over tcp at the router (block TCP 137-139
and UDP 137-139), but, in this case, what is it you want to accomplish
with the ICF on the clients anyway?

Now, things are supposed to change with XPsp2, which is supposed to
differentiate between subnet local traffic, and off-subnet traffic -- I
mean, ICF will change with Windows XP service pack 2 (which is not yet
released).