Windows 2000 server as a router??

[kev01]

Hi,

I have a small home network ( a domain with 1 server and 3 clients) and I was wondering how to best secure my home network. I am currently sharing the Internet with a NAT software (Sygate Home network).

I was told that I should use a Router to secure my home network from the outside.

I think that W2K server can be used as a router...So, is it ok to use W2K svr as a router to secure my home network? Or is there a better solution available??

Also, what is the difference between a router and a gateway?

Thanks in advance,
Kev

 

[MattWray]

A gateway is your connection to the outside world, typically a hardware router, but in your case probably whichever machine is running the NAT software.
I would recommend a hardware router instead of a machine doing the routing. That is solely what a router is designed for, where a pc was can do it, but was not designed to...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[jorggan]

You could always set up a box with routing software on it. Then you could not only run it as a router, but if you so desired you could use some of the firewalling features as well. Take a look at Freesco, its one of several programs that comes to mind.

http://www.freesco.org/

 

[kev01]

Thanks for your reply.

What are the advantages of hardware routers over software routers (like W2K svr)?

Also, can any machine on the network run the NAT software? or does it preferably have to be the server?

Thanks in advance,
Kev

 

[MattWray]

Routers are specifically made for Routing. PC's running software are not. If a PC running any routing software was as good as a hardware router, Cisco would go out of business. Think of it this way. You have a Hot Rod Camaro, beefed up for racing. You pull up at a red light next to a Drag Racing Car. What do you think? You made one able to race, the other was made for racing.

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[Nuqe]

Hey Kev01

there are advantages/disadvantages for using hardware or software routers. If you have a few dollars, i'd use a hardware router, it lets the server do what its suppposed to do and doesn't use up processing time with stuff that can be done by a hardware router. Any machine on the network can run the NAT... essentially NAT is simply setting your clients up with a default gateway. ex. your software/hardware router becomes a NAT server for internet clients.

I dont know if i added anything to this question but i figured i'd put in my opinion hehe cheers!


We all know about the "stupid user" don't we...

 

[mattjurado]

Yes, use the hardware router. When your address gets scanned (and it will at least 100 times a day, check your logs), you want your router scanned. If someone gets a hold of your router, the worst you have to do is reset it, and reinput your settings. If they get a hold of a computer, they can install all kinds of tools to not only screw with you, but use your machine to attack others (which you could be held liable for). If you absolutely must use a pc, load it with FreeBSD or Linux, something more secure than MS.

Matt

 

[kev01]

Thanks,

Can anyone suggest me an affordable router for my home network?

thanks in advance

 

[MattWray]

There are tons of them out there. Linksys and Netgear are a couple of the more popular inexpensive ones (under $100)....

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[Nuqe]

The routers like mentioned above linksys,netgear etc, they are getting easier to use... much easier to setup than a sofware router(depending on what you want it to do). they have Web based configurations to them and is worth the $$.

Nuqe

We all know about the "stupid user" don't we...

 

[Seaspray0]

Besides just considering a router, also look into blocking ports you don't want open to the outside. 2k provides good ip filtering capability. Blocking ip ports is considered a firewall but I wouldn't stop there. Firewall sofware that filters by application provides added protection. Read the following article at

http://grc.com/dos/grcdos.htm

to see some results on firewall testing.

 

[kev01]

If I have a Router with firewall capabilities, do I still need to install desktop/personal firewalls on each client of my network?

Thanks in advance,
kev

 

[mattjurado]

No, not unless you're a very high secure enviornment... Sounds like a basic home setup to me...

Matt

 

[MattWray]

I agree with Matt. If you have a router with a firewall, you don't need them on the desktops, overkill...

Thanks,

Matt Wray
MCSE, MCSA, MCP, CCNA

http://www.sss-steel.com

http://www.total-tec.com

 

[Nuqe]

the firewall stops punks trying to hack, but it doesn't stop infected files... so even though a firewall protects you from external attacks, it doesn't stop you from getting a virus, so whether you put a virus scanner on your server, or on your clients that's up to you.

NUQE

We all know about the "stupid user" don't we...