>
> As you suggested, I'll keep Zone Alarm loaded.
If you're not concerned about outbound connections, which a NAT router with
no true FW can stop (Trojans - Spyware outbound connetcions), then you
don't need ZA. On the wireless computer, you should have ZA. Use Goggle to
search on wireless security for the Home Network environment. You'll get
some pointers.
> Also, I noticed that the router comes with: Freedom® Zero-Knowledge
> Systems privacy and security software.
> Should I use this along with ZA? Instead of?
Crap keep things simple such as AV at the machine level and not something
trying to protect the network. And is not ZA Pro doing some of the other
privacy stuff, which I consider to be crap there as well -- but anyway?
If you need to stop a machine from going to a WEBsite then use the HOST
file. IE: 127.0.0.0.1
www.microsoft.com entry in the Host file will stop
anyone through a browser from going to
www.microsoft.com when entered in
the browser address line.
> How about WinPoet? Do I need that ?
You won't need it as the router's Admin screen will allow you to configure
it to access a PPPoE ISP. The MTU (maximum transfer unit) is the maximum
size of data packets that can be transferred across a given physical
network. And the MTU may have to be set, check with the PPPoE ISP for that
setting.
> ------------------
> My network configuration screen (control panel) looks like this:
>
> Client for MS networks
Yes
> Dial-up adapter (has a PoET icon?)
No
> ivasion PoEt adapter
I don't know most likely no.
> Netgear FA310TX fast ethernet adapter
You'll need the NIC's driver installed - most likely it's already
installed.
> NDISWAN ivasion adapter
I don't know most likely no.
> TCP/IP Dial up adapter
No
> TCP/IP NtegearFA310TX fast ethernet pci adapter
>
I don't know check with the manufacture.
Network protocols or service needed:
1) MS File and Print Sharing and put computers into the same WorkGroup to
share resources between machines behind the NAT router.
2) Netbeui or Netbios
3) TCP/IP
4) Set NIC's properties to Obtain a DHCP IP from the router and Obtain DNS
server Auto.
5) Set ZA on each machine to only accept the router's DHCP IP(s) on ports
137-138 UDP and 139 TCP. And 445 (NT only) if NT based O/S is being used.
Limit the number of DHCP IP(s) that can be issued to the number of machines
you have. By doing that, if an IP on the router was hijacked because of
someone using your wireless setup on their behalf, you'll know as one of
your machines will not be able to get an IP. It's not 100%, because someone
could use a static IP on the router. And that's why you should enable
logging on the router and review traffic to and from the router on a
routine basis.
If the DSL ISP is like my Broad Band ISP, then at least one computer with
it's NIC's MAC was provisioned with the ISP so that the machine could
access the ISP's Network. If this is the case, then you can clone that MAC
into the router using its MAC Cloning Feature and the ISP will not know the
difference and all machines connected to the router will be able to access
the ISP using the one IP.
If you do your home work and key is to understand the router and what it
does and how to manipulate it, then you shouldn't have to pay the ISP any
additional cash.
The router should have a Support Knowledge Base Website and there is always
Google on the howto(s) on the router as well.
You mess-up with the router settings, you can old the Reset button down for
30 seconds and it will reset back to the factory defaults.
BTW, I use Linksys. <g>
HTH
Duane