Firewall Use

[Ric]

Situation

I have a Fast Ethernet network set up to share a DSL connection from one computer (desktop). The DSL modem was free and is a USB connection so doesn't work with routers and must be connected to the desktop which initiates the connection. Right now only another laptop in a close room shares this internet connection via a hub. (Software is Sygate - desktop is Win XP Home and laptop is WIN 2000)

I have been running Symantic Desktop firewall on desktop but it has been a hassle as it blocks most of my file and print sharing between the two internal computers. Can't for the life of me figure out how to get the app. to allow sharing.

Solution - Will this work? (I also run Norton Antivirus religiously)

Need to have two new computers access this connection and don't want to wire ethernet cables down to the basement. Thinking about getting a Wireless access point to connect to the hub and two wireless cards for new computers. Need to overcome firewall issue so thinking about shutting down Symantec and using XP's provided firewall. I know it doesn't have the in depth security of Symantec's (+ is only one way) but XP firewall does allow for my internal file and print share.

All in all - (opinions against MS aside), would I be ok with this plan before I fork out a few hundred dollars and possible open up a firewall hole? I have technical overview knowledge (learn as I read) but no technical training so I am not sure if this is ok.

[MarkA]

I'd say if you'd be comfortable with the router, go ahead and feel fine with the XP built in firewall. A router isn't really a true firewall, it just hides ports and blocks connections. XP firewall will do that for you...

Also, is the DSL modem USB ONLY? I'm sure it probably is, but I'm not sure if you've looked (yeah, I gotta ask). Some modems (like mine) have both connections. For some reason my ISP encourages you to use the USB port and only to use the Ethernet if you don't have a USB port?!?!?!?!?!??!?!?!!? Which is really dumb because the USB link slows your computer down and is relatively unreliable. It's the DSL version of a Winmodem.

[Neil Derryberry]

I'm told that some linksys routers actually have USB connections, but I'm not sure myself... try their site.

You might try installing Linux of some flavor on a spare box if you have one, and use it as your firewall... That would be the best and possibly cheapest software solution.

[gcutler]

Originally posted by Neil Derryberry
I'm told that some linksys routers actually have USB connections, but I'm not sure myself... try their site.

The Linksys' USB connection is to the "Hub/Switch" part of the Router, not the WAN port on the router, so it is fine for a PC to connect to the router via USB but not for the DSL/Cable Modem to connect to the USB port.

[Ric]

Thanks - in my proposed setup, I am not actually using a true router. It is a wireless access point. I spoke with someone at Compusa and they said since my Modem is truly USB only (I did just double-check it) and that I have a hub already, then this was my best shot.

The wireless access point will connect to the hub via Ethernet and then the two new computers will use the wireless. According to Compusa guy, this should work. Personally, I understand what he is saying but have no background to verify its authenticity so that's why I turned to you guys (and gals).

[James_F]

Here is some help with the built in firewall from MS...

http://www.microsoft.com/technet/treeview/default.asp?url=/technet/columns/security/5min/5min-101.asp

[Wedgecon]

The ACL's in a Cisco router (and most others) make a better firewall than the one built into XP.

In fact before proxies, and statefull inspection ACL's in routers were about the only firewalls.

XP's firewall is actually just a very basic GUI for adding some ACL's to the IP stack in the OS.

[James_F]

Very true, but he has a USB DSL modem. I think we all agree the "safest" route would be to get an Ethernet modem and plug it into a router.