NAT Firewall

[wetcat007]

This might be a bit of a newbie question, but for the last 2 years I've been using my Netgear RP114 router for my internet, however it really doesn't do half the options of what I need it to, like getting generals working, because it doesn't forward UDP ports. So I've setup my main server as being directly hooked up to the cable modem via USB and the network card going form the computer into a hub. It then splits off to the rest of the computers and assigns them DHCP network addresses, (192.168.0.x).

Anyways what I was wondering, is are all my computers on the network protected decently, and how do I go about protecting my server, where it wont interfere with it's ability to be used as a router.

PS it's running Windows 2000 Server

-Mark

 

[kt]

Hmm.. you have enough money to spend on Windows 2000 Server but not enough to spend on a decent $50 router?

 

[wetcat007]

I'd like to get it working through a computer instead of a router, just because well I'd rather have it setup like that.

 

[bbqweed]

ICS is a pain in the butt...If you set up through computer...the "main" one has to be on at all times. As for security...your other computers "behind" the main one should be fine.

Just get a Linksys router, and that way...there is no "MAIN" computer and you are protected on all computers....

Trust me, I am in the industry and I've seen ICS mess up a great deal of times....(Especially if you run XP w/ it's stupid ICF...and home networking wizard that doesn't even work)

-My 2 pennies....

 

[birthofsorrow]

if you decide to stay with a server, get something like blackice or zonealarm and that should do the trick. Disable all clients and protocols accept tcp/ip on your cable internet network adapter.

 

[narzy]

win2k as a border = hackers paradise , get a linksys, or any other firewall that has SPI and be done w/ it.

 

[Oaf357]

If you use ZoneAlarm or BlackICE to protect your network I pity you. If you insist on using ICS though the server will have to remain on at all times (if you restart the network goes down, if it crashes the network goes down). But, it should serve its purpose. Just be sure to stay up to date on patches and updates.