Firewall stops Internet Sharing from Clie

I find that I can only use Internet sharing from my Clie UX50 if I disable
the Internet Connection Firewall on my desktop - then it works fine.
However, I don't want to leave the firewall disabled - for obvious reasons.
Is there any way of overcoming this problem?

Configuration is as follows - not ideal, probably, but as it is for
historical reasons:-

Desktop runs WinXP Home, with USB broadband modem connection to Internet.
Desktop connected to LAN switch. Wireless access point (D-link DWL-700AP)
also connected to switch. DHCP disabled on WAP, but Clie set to use DHCP.
(I'm not at all clear what's allocating the IP address to the Clie. I have
found that I cannot access the Internet from the Clie, even with the
firewall disabled, using a static IP address - it will only work using DHCP,
and provided DHCP is disabled on the WAP)

Ryder Cowan

In message <QJJGb.5187$(E-Mail Removed)>, Ryder Cowan
<(E-Mail Removed)> writes
>I find that I can only use Internet sharing from my Clie UX50 if I
>disable the Internet Connection Firewall on my desktop - then it works
>fine. However, I don't want to leave the firewall disabled - for
>obvious reasons. Is there any way of overcoming this problem?

Its a documented problem (a quick search should find the relevant M$
page). The solution is a different firewall, Zonealarm will do a better
job than ICF anyway, which is chock full of vulnerabilities (again,
admitted on M$'s website).

Its remotely possible the next major revision of ICF might fix it,
however the problems been there (and known) since XP launched so don't
hold your breath waiting.

--
Paul Shirley: email anti-spammed

Here what you got right?
internet-->Broadband modem
|
Switch Hub----Computer
|
WAP~ : : wireless : : ~CLIE

You disable the DHCP on the WAP, so you must have a static IP for it
settings somewhere
The NIC (tcp/ip) in the puter will provide the IP to the CLIE (via DHCP)

oki try this configuration, static IP all arround within same range (accept
for broadband modem, this provide by ISP DHCP)

Static IP on puter TCP/IP properties on NIC 192.168.0.1
Static IP on WAP 192.168.0.2
Static IP on CLIE ip=192.168.0.3 , submask=255.255.255.0 , default
gateway=192.168.0.1 (ip of main puter with internet conection) , DNS
server=192.168.0.1

cheers



"Ryder Cowan" <(E-Mail Removed)> wrote in message
news:QJJGb.5187$(E-Mail Removed)...
> I find that I can only use Internet sharing from my Clie UX50 if I disable
> the Internet Connection Firewall on my desktop - then it works fine.
> However, I don't want to leave the firewall disabled - for obvious
reasons.
> Is there any way of overcoming this problem?
>
> Configuration is as follows - not ideal, probably, but as it is for
> historical reasons:-
>
> Desktop runs WinXP Home, with USB broadband modem connection to Internet.
> Desktop connected to LAN switch. Wireless access point (D-link DWL-700AP)
> also connected to switch. DHCP disabled on WAP, but Clie set to use DHCP.
> (I'm not at all clear what's allocating the IP address to the Clie. I have
> found that I cannot access the Internet from the Clie, even with the
> firewall disabled, using a static IP address - it will only work using
DHCP,
> and provided DHCP is disabled on the WAP)
>
> Ryder Cowan
>
>
>
>

On 25/12/03 10:41 pm, in article QJJGb.5187$(E-Mail Removed),
"Ryder Cowan" <(E-Mail Removed)> wrote:

> I find that I can only use Internet sharing from my Clie UX50 if I disable
> the Internet Connection Firewall on my desktop - then it works fine.
> However, I don't want to leave the firewall disabled - for obvious reasons.
> Is there any way of overcoming this problem?
>
> Configuration is as follows - not ideal, probably, but as it is for
> historical reasons:-
>
> Desktop runs WinXP Home, with USB broadband modem connection to Internet.
> Desktop connected to LAN switch. Wireless access point (D-link DWL-700AP)
> also connected to switch. DHCP disabled on WAP, but Clie set to use DHCP.
> (I'm not at all clear what's allocating the IP address to the Clie. I have
> found that I cannot access the Internet from the Clie, even with the
> firewall disabled, using a static IP address - it will only work using DHCP,
> and provided DHCP is disabled on the WAP)
>
Your USB modem should have some kind of firewall functionality ?

Turn that on, and the XP firewall off and it should be okay.

Are you sure you¹ve turned the XP firewall on, only on the USB Network
connection and not the connection to the LAN switch ?

In message <BC11D769.1AC58%(E-Mail Removed)>, Graham in Melton
<(E-Mail Removed)> writes
>Your USB modem should have some kind of firewall functionality ?

Very unlikely unless its a combo modem/router (but he wouldn't need ICS
if it was!)

Replacing the switch with a broadband router is my preferred option.
Retaining the existing switch an ultra cheap 1 port router feeding the
switch would do the job. But simply changing firewalls is the cheapest
solution.

--
Paul Shirley: email anti-spammed

Echo the router route (er, choice).

We switched from ICS to a router a couple years ago, and everything is
so much simpler! Especially, in that we don't have to run the ICS host
in order for other PC's to access the web.

-- GeneM

If your using the same machine for both, then you'll overwrite the old
desktop software. This may not be a real problem.

However, if you use two different users for the hotsync, one for the Vx and
one for the Te then you'll end up with programs you won't be able to use on
one machine because the User/Serial# won't match. If you can live with some
programs one one and some other on the other machine, then OK.

Otherwise I would suggest you setup two different computers with the palm
desktop software. And use the same username on both Palms.

Dan

"Ryder Cowan" <(E-Mail Removed)> wrote in
news:QJJGb.5187$(E-Mail Removed):

> I find that I can only use Internet sharing from my Clie UX50 if I
> disable the Internet Connection Firewall on my desktop - then it works
> fine. However, I don't want to leave the firewall disabled - for
> obvious reasons. Is there any way of overcoming this problem?
>
> Configuration is as follows - not ideal, probably, but as it is for
> historical reasons:-
>
> Desktop runs WinXP Home, with USB broadband modem connection to
> Internet. Desktop connected to LAN switch. Wireless access point
> (D-link DWL-700AP) also connected to switch. DHCP disabled on WAP, but
> Clie set to use DHCP. (I'm not at all clear what's allocating the IP
> address to the Clie. I have found that I cannot access the Internet
> from the Clie, even with the firewall disabled, using a static IP
> address - it will only work using DHCP, and provided DHCP is disabled
> on the WAP)
>
> Ryder Cowan
>
>
>
>
>

In alt.internet.wireless Ryder Cowan <(E-Mail Removed)> wrote:
> I find that I can only use Internet sharing from my Clie UX50 if I disable
> the Internet Connection Firewall on my desktop - then it works fine.
> However, I don't want to leave the firewall disabled - for obvious reasons.
> Is there any way of overcoming this problem?

You need to make some adjustments to the Firewall, which is pretty tight by
default, and doesn't allow file sharing.
This looks like the right one. It mentions File Sharing:
http://support.microsoft.com/default...b;en-us;308127
And some other reading:
http://support.microsoft.com/default...b;en-us;320855

Many thanks for all the help and suggestions. I tried changing configuration
settings on my wireless LAN, and also tried to change the firewall settings,
with no success, and ended up downloading ZoneAlarm Pro. Everything is now
working perfectly! I'd been struggling to get it to work for weeks, and wish
I'd tried ZoneAlarm sooner!!

Ryder Cowan


"Paul Shirley" <(E-Mail Removed)> wrote in message
news:xorVX+BTSD7$(E-Mail Removed)...
> In message <BC11D769.1AC58%(E-Mail Removed)>, Graham in Melton
> <(E-Mail Removed)> writes
> >Your USB modem should have some kind of firewall functionality ?
>
> Very unlikely unless its a combo modem/router (but he wouldn't need ICS
> if it was!)
>
> Replacing the switch with a broadband router is my preferred option.
> Retaining the existing switch an ultra cheap 1 port router feeding the
> switch would do the job. But simply changing firewalls is the cheapest
> solution.
>
> --
> Paul Shirley: email anti-spammed

In alt.internet.wireless Ryder Cowan <(E-Mail Removed)> wrote:
> Many thanks for all the help and suggestions. I tried changing configuration
> settings on my wireless LAN, and also tried to change the firewall settings,
> with no success, and ended up downloading ZoneAlarm Pro. Everything is now
> working perfectly! I'd been struggling to get it to work for weeks, and wish
> I'd tried ZoneAlarm sooner!!

I have an SMC router with wireless connected to my cable modem.
I have ZoneAlarmPro installed om my laptop because I carry it to other
places, where I am concerned about the public access.

A router is sufficient for home wired use, but as soon as you introduce
wireless into the picture, you really should have some firewall on each PC.
I think you could have made the built in XP firewall work, but if you have
ZoneAlarm, you certainly havew a better tool.

Don't set your local network as a trusted network.
Only set the IP addresses that you have as trusted, because any wireless
unit that connects will be on your trusted network.
Set your DHCP to unlimited lease time so that the IP addresses that you
trust don't shift, over time.