(E-Mail Removed) (Kurt Ullman) wrote in news:VaSmd.29017
$(E-Mail Removed):
> In article <(E-Mail Removed)>, Richard Perkin
> <(E-Mail Removed)> wrote:
>>Most software firewalls have either an explicit option to allow
>>traffic on these ports (for file and print sharing), or make it
>>fairly easy to configure, usually by a rule or 'trusted zone' to
>>allow traffic between defined IP addresses.
> Having the same problem, what would the IP addresses be? I don't
> see an option in Zone Alarm for trusting ports. I have my desktop
> into Ethernet 1 in my Linksys BEFW11S4 and my laptop into a WPC11
> notebook adaptor.
Can't claim to be an expert on ZoneAlarm (I use Sygate), but I
undertstand:
- you can use the Network Configuration Wizard to set your private
network into the Trusted Zone
- or do it by hand. Suggest you add the whole of your local network,
unless you are unduly paranoid. This will allow all communication
between systems behind the router. To do this:
1. Select Firewall | Zones
2. Click Add, then select Subnet from the shortcut menu
The Add Subnet dialogue appears
3. Select Trusted from the Zone drop-down list
4. Type the IP address (my router's subnet is 192.168.0.0) in the
first field, and the Subnet mask (255.255.255.0) in the second field
5. Type a description (eg Local Network) in the field provided, then
click OK
If you are feeling a tad paranoid, you could just add the IP
addresses which are in use:
1. Select Firewall | Zones.
2. Click Add, then select IP address from the shortcut menu.
The Add IP Range dialogue appears.
3. Select Trusted from the Zone drop-down list.
4. Type the beginning IP address in the first field, and the ending
IP address in the
second field. For example, if you have the router + 2 PCs and are
using DHCP, they will (by default on my router) have the addresses
192.168.0.1 - 192.168.0.3. Use these addresses in the two fields.
5. Type a description (eg Local Network) in the field provided, then
click OK
I have the whole subnet as 'trusted'. The main reason is for
simplicity: I have a goodly number of IP addresses in use, the low
ones allocated by DHCP and high ones allocated as static IP
addresses. I use the whole subnet, then I never need to add or change
anything. I did of course monitor the firewall logs for a period to
ensure that the router was giving me protection from incoming baddies
- and I am happy that it is.
Hope this helps
--
Richard Perkin
To email me, change the AT in the address below
richard.perkinATmyrealbox.com
It's is not, it isn't ain't, and it's it's, not its, if you mean it
is. If you don't, it's its. Then too, it's hers. It isn't her's.
It isn't our's either. It's ours, and likewise yours and theirs.
-- Oxford University Press, Edpress News