RE: Making a W2K with Internet Connection Sharing secure

[Peter Snell <PSnell () daymon com>]

Since you are running Win2K, you could configure RRAS instead of ICS and
improve your security that way.  For free f/w I use the free version of Zone
Alarm available from
http://www.zonelabs.com/store/content/catalog/products/zonealarm/znalm_detai
ls.jsp  and if you are looking for a free a/v soultion checkout
http://www.grisoft.com/html/us_downl.htm?session=27b87c3a921bccc18d431d519a0
882c1  I use both of these and am very satisfied with them.  

-----Original Message-----
From: Clinton McGuire [mailto:cmcguire () candlewest com]
Sent: Saturday, January 11, 2003 3:59 PM
To: mike () moorecomputing net; ssgill () gilltechnologies com;
security-basics () securityfocus com
Subject: RE: Making a W2K with Internet Connection Sharing secure


If you are going to use a low end comp to run a linux firewall check-out
http://www.coyotelinux.com/
Linux on a floppy and its build for firewalls and other network appliances,
also has great support, but I don't know if it has URL filtering...

Clint

-----Original Message-----
From: Mike Moore [mailto:mike () moorecomputing net]
Sent: January 9, 2003 7:04 PM
To: ssgill () gilltechnologies com; security-basics () securityfocus com
Subject: RE: Making a W2K with Internet Connection Sharing secure


If you can come up with a very low end pc take a look at www.ipcop.org .
It's a free Linux firewall that is very good in my opinion. They have a
great mailing list for support. Then go here
http://www.ipcop.org/cgi-bin/twiki/view/IPCop/IPCopDGHowto for Dan's
Guardian a URL filtering application that works with IPCop. Then the W2K
server and all workstations are protected. Just a thought.

Mike

> -----Original Message-----
> From: Sarbjit Singh Gill [mailto:ssgill () starhub net sg] 
> Sent: Tuesday, January 07, 2003 10:06 PM
> To: security-basics () securityfocus com
> Subject: Making a W2K with Internet Connection Sharing secure
>
>
> Greetings,
>
> I am a part of a group of volunnteers who help with 
> teaching underprivileged kids in orphanages.
>
> we had some donation of softwares from Microsoft and 
> hardware from HP and DSL connectivity from a local 
> telco.
>
> The setup looks something like this :
> DSL modem connected to a multi homed Windows 2000 
> Server. The W2K box is then sharing the ADSL 
> connection via Internet Connection Sharing to the LAN 
> made up of 10-25 PC running W98,WME and W2K Pro.
>
> I need somekind of proxy/NAT/firewalling  and URL 
> filtering capabilities on the W2K. They have to be 
> free. We are sourcing for some netscreen stuff but do 
> not know when it will come in. 
>
> I can't use IP filtering in W2k as it affects all 
> adapters. The LAN PCs use the server as a DC for 
> policies and authentication. 
>
> Right now the W2K server is connected to the internet 
> with no security whatsoever.
>
> Thanks in advance.
>
> Gill
>
>
> Sarbjit Singh Gill
> ssgill () gilltechnologies com 
>
> Powered by Gee! - Wireless Access Anywhere

---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.438 / Virus Database: 246 - Release Date: 1/7/2003