Re: Making a W2K with Internet Connection Sharing secure

Sarbjit Singh Gill <ssgill@starhub.net.sg> randomly produced:

<snip>
::
:: I need somekind of proxy/NAT/firewalling and URL

Unless Microsoft is so kind as to donate a copy of ISA I can't see you getting anything like this for free..

You could use something like Tiny Personal Firewall and secure the box as much as possible (http://www.darknet.org.uk/content/files/securewin2k.txt), but this wouldn't help with any kind of content filterting.

::
:: I can't use IP filtering in W2k as it affects all

I personally would dump W2k as it's not really suitable for this kind of job when you had a 0 budget, I don't think it's suitable for this kind of job at all, but's that's an entire debate on it's own.

IMHO you should use a Linux or BSD machine and something like dansguardian (http://www.dansguardian.org/) which provides free content filtertering using SQUID (a free proxy http://www.squid-cache.org/)

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek

IPTables/IPF which are integral parts of *nix systems can accomplish the NAT and firewalling very adequately.

You could keep the Win2k server inside this if you need a domain controller as you can run this kind of setup on a very low spec box (133-266mhz).

::
:: Right now the W2K server is connected to the internet

Not a good thing to advertise :)

:: Thanks in advance.
::
:: Gill

Good luck

Shaolin

.: http://www.security-forums.com :.

         Share your knowledge
          It's a way to achieve
                Immortality.

Do you need more help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related securityfocus.com Links bugtraq certification focus-bsd focus-ids focus-ih focus-linux focus-ms focus-sun focus-unix-other focus-virus forensics incidents libnet linux-secnews ms-secnews pen-test secpapers secprog sectools secureshell security-basics securityjobs sf-news vuln-dev webappsec Request more information about Pantek