Computer Chess Club Archives


Search

Terms

Messages

Subject: Re: Even more OT: setting up a cable/DSL router for safety

Author: Roy Eassa

Date: 14:01:16 05/16/02

Go up one level in this thread


On May 16, 2002 at 16:41:10, Keith Ian Price wrote:

>The SPI is the firewall which actively checks incoming destinations against
>outgoing requests. If you disable you are merely using the less helpful Network
>address translation to protect you from intruders. NAT is where your
>non-Internet-routable address such as 192.168.xxx.xxx with Linksys, is
>translated to the ip address that the cable company assigned you, when you go
>out on the Internet, and back when the reply comes in. Something initiated from
>outside might get through unless there were a check against an outgoing request
>for the info that is incoming.
>
>kp


OK, I've turned on SPI.

I've turned off "Remote Management" and "Remote Upgrade" of the router.

I've turned on "Block WAN Requests".


Do you have advice on the settings (on/off) for these others?:

* Multicast Pass Through

* IPSec Pass Through

* PPTP Pass Through


And one final question: What are the tradeoffs in deciding whether or not to
filter the MAC addresses of the individual PCs in the local network from going
out over the Internet?


Thank you very much!!



This page took 0 seconds to execute

Last modified: Thu, 15 Apr 21 08:11:13 -0700

Current Computer Chess Club Forums at Talkchess. This site by Sean Mintz.