RE: Making a W2K with Internet Connection Sharing secure

["shawn" <shawn () knisely org>]

Hi,
Not sure if this is exactly what you are looking for, but if you can
provide a low end PC you can setup a nice router for free. Check out
www.coyotelinux.com for the details. I have been running it for a while
now and it provides a very stable secure router, ports closed by default
so it does protect you to that degree. For a nominal fee you can get the
Wolverine software which is like a PIX firewall. I know people who run
it, but I have not had any luck using it over PPoE.

Hope that may help.

T. Shawn Knisely

-----Original Message-----
From: Sarbjit Singh Gill [mailto:ssgill () starhub net sg] 
Sent: Tuesday, January 07, 2003 11:06 PM
To: security-basics () securityfocus com
Subject: Making a W2K with Internet Connection Sharing secure

Greetings,

I am a part of a group of volunnteers who help with 
teaching underprivileged kids in orphanages.

we had some donation of softwares from Microsoft and 
hardware from HP and DSL connectivity from a local 
telco.

The setup looks something like this :
DSL modem connected to a multi homed Windows 2000 
Server. The W2K box is then sharing the ADSL 
connection via Internet Connection Sharing to the LAN 
made up of 10-25 PC running W98,WME and W2K Pro.

I need somekind of proxy/NAT/firewalling  and URL 
filtering capabilities on the W2K. They have to be 
free. We are sourcing for some netscreen stuff but do 
not know when it will come in. 

I can't use IP filtering in W2k as it affects all 
adapters. The LAN PCs use the server as a DC for 
policies and authentication. 

Right now the W2K server is connected to the internet 
with no security whatsoever.

Thanks in advance.

Gill


Sarbjit Singh Gill
ssgill () gilltechnologies com 

Powered by Gee! - Wireless Access Anywhere