Forum Moderators: open

Message Too Old, No Replies

Windows 2k Firewall

Locally

         

daisho

5:57 pm on Nov 18, 2003 (gmt 0)

10+ Year Member



Hello All,

Hopefully someone here can give me a suggestion. I'm in a situation where I need to setup a Win2K Webserver. Now the client does not want to sprint for a firewall for this server. On linux I'd just whip up some iptable rules and filer out what I don't want. Is there a Win2K comparable solutions? I just want to basically close all ports but [...] type solution.

Thanks,
daisho.

bcolflesh

6:00 pm on Nov 18, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



Kerio Personal Firewall:
kerio.com/us/kpf_download.html

plumsauce

11:15 pm on Nov 18, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




ras packet filters

also look for netsh.exe in the resource kit
for a commandline interface to the filters
much like cisco ios

Stretch

11:36 pm on Nov 18, 2003 (gmt 0)

10+ Year Member



Or use the built in IP filtering:

connection properties > General tab > TCP/IP properties > Advanced > Options > TCP/IP filtering > Enable TCP/IP filtering check box > permit only radio button...

daisho

11:53 pm on Nov 18, 2003 (gmt 0)

10+ Year Member



bcolflesh: The "Personal" scares me a little...

plumsauce: do you know where to get this utility if I don't have the resource kit? I'd like the option best of all. I would be happy with a Cisco ISO or Linux type interface. I understand them :)

Stretch: Right I know I had seen that somewhere before. If I can't get a command-line utility I might go that route.

Thanks,
daisho.

plumsauce

5:38 am on Nov 19, 2003 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member




daisho,

the resource kit is freely downloadable from
microsoft. try either the main iis site under
downloads, or the msdn site under downloads.

about 50MB.

it uses the same mechanisms as the packet
filtering option under the network properties,
but is much more granular.

the reason for netsh.exe is that you can work
on the filters to your hearts content in a
txt file and then run it as a batch. good
for rebuilding.

there is actually nothing wrong with kerio,
it is VERY good.

with the netsh.exe you can very close to
what can be done with a cisco pix.

plumsauce

duckhunter

4:51 am on Nov 21, 2003 (gmt 0)

10+ Year Member



Kerio