TCP-IP Filtering

[controler]

Hello

Is anyone using the TCP-IP Filtering option in WIndows XP?

control panel

network connections

right click on the connection you use. example = your dialup connection you see there or
a default DSL or Cable connection you see there (local area connection)

then click properties

then highlight internet protacol (TCP/IP)

Click properties

click advanced

click options

Tcp/IP filtering should be highlighted


click properties

should see an enable TCP/IP Filtering check box as in the screen shot.

[Mike_Healan]

Well I'll just be damned!!! I never knew that was there.

And leave it to Microsoft to screw it up. You can allow all or allow those on a list. No option to deny all or deny those on a list. That would almost make a decent firewall if they'd let you deny a list of ports/IPs.

[JacK]

-{ Quote: " quoting: Mike Healan link=board=18;threadid=6143;start=0#40871 date=1042184873]
Well I'll just be damned!!! I never knew that was there.

And leave it to Microsoft to screw it up. You can allow all or allow those on a list. No option to deny all or deny those on a list. That would almost make a decent firewall if they'd let you deny a list of ports/IPs.
" }-

lol Don't forget it only filters IN.

Rgds,

JacK

[controler]

Yes it is funny ;D

We are used to a list of deny filters not a list of accept filters. But I think loaded with the easy access info on PORTS, people might be able to add those they know they should have open using this advanced feature. Funny thing is I found this feature on my own and hadn't seen any info on it. As you can see it takes a bit of clicking to get to it LOL
I still wonder how this works with the built in firewall.
Can you imagine the converts XP would get if their IP filtering DID
block outgoing atempts?
Do you think it would even help as another layer of defense?

[CrazyM]

-{ Quote: " quoting: controler link=board=18;threadid=6143;start=0#40931 date=1042204682]
I still wonder how this works with the built in firewall.
Can you imagine the converts XP would get if their IP filtering DID
block outgoing atempts?
Do you think it would even help as another layer of defense?" }-

Hi controler
The TCP/IP Filtering is rather limited. Not sure if you saw the following post on IPSec which can control inbound and outbound traffic. Even to and from specific addresses, but not applications. A custom IPSec policy could be used as another layer of defense.

http://www.wilderssecurity.com/showthread.php?t=3266;start=0

Regards,
CrazyM

[house of games]

Thank you....I was notified to "restart"...this should do it!!