Win XP security problem

[nick.arnott]

i have 2 Win XP comps networked and have had to set the security on both comps to "Full control" for "everyone". How can i improve security on my comps so they r protected from the internet but still have coplete control of each other. My comps r networked through a linksys eaterfast cable / DSL router which claims it has a built in firewall but it still fails the security test at http://grc.com/lt/leaktest.htm[/URL]

which test does it fail at the leaktest? do you have the latest firmware for the router?


as long as you have strong password i.e 5 letters, capitials letter along with lower case, number and symbols you should be pretty safe log in wise. also do not use the default administrator account for everyday use. make another admin account for your everyday use.

some people like to run a software firewall program like Zonealarm or Sysgate on all computers behind the router to see what programs are going out.


also for your router. you can go to www.wallwatcher.com and check out what is incoming and outgoing from your router

[Westy]

Right if you have a dsl router installed wht you want to set it up to do is drop tcp/ip requests if they aren't located in the NAT table as this table keeps a record of ALL outgoing traffic and only allows traffic that exists in the NAT to pass through it.

Also you could try turning on drop all ICMP packets as this would prevent people from pinging your machine to see if its alive although you may need to upgrade to msn 6 as you won't be able to send and recieve files through the NAT due to the way that the packetss are constructed.

Its just a case of setting up your router correctly

Hope this is of some help i'd give you step by step instructions but i don't know my way round this particular router.

[nick.arnott]

thanks but i need setup instructions

for which part. Check the manual of the router to see what options you have for protection. like i said upgrade the firmware (provided in my thread)

again, which test did your computers fail at?

[nick.arnott]

the security leek test at http://grc.com/lt/leaktest.htm

[LittleKing]

Are they XP Home or XP Pro (Although I don't know if this would make a difference). Anyway...

I know if they are XP Pro then you could set the permissions to Authenticated Users, and put the same user on each machine with the same password and you are good to go. Only if you know an account on the machines and the password then can get in.

You should be able to have different users logged into each machine and still be able to connect without problems.

With everyone it doesn't matter if they have an account or not then they are allowed in, at least I believe it is that way.

LK

run free firewall software like zonealarm or sysgate and you should pass the test with extra secuirty

[nick.arnott]

thanks
i do have xp pro
and i thought of wat u were saying LittleKing about the users but wasnt sure it would work