Anyone have experience with Win2003 Firewall?

[Scroller]

I'm playing around with this built-in firewall in Win2003, basically tryin to tighten up things a bit (and save some cash without buying one ), but just can't quite get it to work.

Even after specifying Web(80) to be allowed through, I'm still not able get the web portion to work (got blocked), while the rest is fine (FTP, remote access, etc). I was told that the Firewall doesn't work too well with multiple IPs? Is it true? Anyway to solve the problem?

[Brangwyn]

yup thats correct, the built in firewall (basically just ICS) doesn't play nice when there are multiple IP's on the same NIC, effectively (and iirc) it only blocks traffic on the last IP bound to the NIC.

You'd probably be better off using RRAS or IPSEC to firewall your W2K3 Server.

Or, too be perfectly frank, I just don't bother. If theres nothing at the end of a TCP port for something to talk too then why even bother closing the port in the first place I just do a regular audit of what ports have a status of "listening" and make sure I know exactly what each one is.

[Garreg]

My whole experience of Win 2003 has been a nightmare so far..... have a test server in the office - took around 3 days to install it........ damn thing kept crashing (one reason after another). Finally got it installed and the 'Company Web' was completly omitted, then it was something else etc...

To be honest, I've just got Sooooooo fed up I feel like making the damn server into a football. So if you having problems with the firewall - consider yourself lucky and please please please don't tell me installed without any hiccups (sob sob ....).

[Brangwyn]

Feel free to send me a PM if you need help with anything Garreg, I've installed a number of 2003 servers without too many issues cropping up.

[Garreg]

Thanks - must admit, this has really driven me crazy....... never seen anything like it. Some so called 'easy install process'

[Brangwyn]

Well to be honest, I've had no problems at all that I can think of, probably done about a dozen W2K3 installs and a handfull of SBS2003 as well.

You are standing on one leg and poking your tounge out as you press install aren't you? I think thats the secret to installing Microsoft stuff properly

[Scroller]

well .. it's all about managing expectations ... :tongue: not much problem for me for installation ... just getting it to work the way i want it ...

I was recommended VisNetic Firewall (http://www.deerfield.com/products/visnetic-firewall/) ... any good? a little expensive though.

[Brangwyn]

Visnetic is ok, you can find it around called a few other things too as its been rebranded a coupla times.