Outpost firewall pro 2009

Published by: webmaster 2009-01-07

This has been the best firewall i have ever used. I sell it to all my clients. They ask for the best i show them the best.

Anyway i have a odd setup atm and i am having issues. I have op 09 v6.5..........0607.

I have Windows Xp Sp3 and the pc has 2 lan's and a wireless connection. i connect to the internet on the wireless connection, then run ICS just cause it's NORMALLY pain free and hassle free. tell it to share net from wireless with lan1. then i hook up my wireless router a cheap netgear to the lan1. then my other computer connect to wifi router and all is good.

FYI i run the Cat6 cable from lan1 to the in-port of the router where you would normal plug your modem in.

thats the setup i add the op firewall pro 09 to the mix and the router shows im connected to my pc and all is good, but the pc's that are connected to the router get no internet.

I have played with this app all night it works fine when firewall is off. but what good does that do me. fyi i have yet to manually configure the ip/subnet.

here is what i have found to be stopping me.
11:00:50 PM Block OUT TCP 192.168.2.3 62326 213.215.116.226 80 SYN Packet to closed port 213.215.116.226:80 192.168.2.3:62326 OUT, TCP
11:00:44 PM Block OUT TCP 192.168.2.3 62326 213.215.116.226 80 SYN Packet to closed port 213.215.116.226:80 192.168.2.3:62326 OUT, TCP
11:00:41 PM Block OUT TCP 192.168.2.3 62326 213.215.116.226 80 SYN Packet to closed port 213.215.116.226:80

thats when the other pc try to connect. any help is very appreciated.

Ok I�m feeling stupid. I haven�t had this much trouble with networking since I started playing with it 7 or so years ago. I�m going to need some help on this one.
Ok my main connection is a DSL modem and its connected to my belkin router in the basement. Its setup is: in the belkin info png.Now I use this pc to connect to belkin with my wireless card. I share that connection with my shared lan (lan1) to a netgear router. This is on the 3rd floor of the house.
The goal is to have belkin cover the lower 2 levels and netgear cover the upper 2 levels . this works out just fine.
Now that have trusted my lan1 the 192.168.0.0 and checked nat on that lan. I have also got nat checked on the 192.168.2.0 my wireless. It works, but my question is did I make a loop hole for my firewall so I am now vulnerable.

Soft-Best.Net - Security / Outpost Firewall Pro 2009::
Security: Outpost Firewall Pro 2009 | 01.12.2008 18:52 a security novice or expert, you can easily configure Outpost Firewall Pro to meet your needs.
http://soft-best.net/en/detail/outpost_firewall_pro_2009/HOME

The run down: DSL connected to belkin
DSl lan setting: 192.168.1.1
Belkin settings in pic.
Ok Pc on ics. Wireless to belkin. Ics share wireless to lan1. Lan1 to netgear.
Lan1 ip/subnet 192.168.0.1 255.255.255.0
Netgear settings are same as pic but lan settings are now 192.168.3.1 so they don�t conflict with dsl modem.
If it is confusing let me know I will post pics of settings.

Ok now that I have that my my netgear is running from wireless to lan will the op firewill protect the pc that I put on netgear. Or do I need to still install op firewall on them??

.jpg was disallowed here a year or so ago due to a vulnerability in the forum software, which has since been patched, the admins may reinstate .jpgs at some point. we lowly mods have asked...

192.168.0.0 subnet 255.255.255.0 is the same as a range of 192.168.0.1-192.168.0.254 (the .0 and .255 ones are special purpose)

192.168.0.0 subnet 255.255.0.0 covers 192.168.0.1 thru 192.168.255.255

if you are doing an ip/subnet entry it wants the last octet to be zero. if you are adding a single IP, use the radio button just above the one you have ticked for subnet, and enter the full ip then click 'add' - don't forget to click the 'add' button to add it to the table before you click OK else it won't save it.

i'm not familiar with the netgear router, but am a bit concerned about it showing 2 different subnets (the 0.1 and the 1.1) and the other stuff showing a third (2.1) generally the routers internal ip (mine is 192.168.2.1), the hardwire connected pc (i use wireless, but if it were hardwired it would likely be 192.168.2.2 from dhcp) and the wireless ips (mine is a fixed 192.168.2.17) should all be on the same subnet (all 192.168.2.something). makes life easier...on my belkin router i can set the inside ip and it's subnet, and the ip range dhcp leases. if it needs to work with all three subnets, you'll likely need the routers internal ip set to something like 192.168.2.1 subnet 255.255.0.0 which will more than cover the three subnets you use. you may be able to limit it to 192.168.0.1 thru 192.168.3.255 by using a mask of 255.255.252.0 if the router accepts it.

Agnitum Outpost Firewall Pro 2009 - vnunet.com::
Agnitum Outpost Firewall Pro 2009. Powerful protection for home users. Written by Paul Rowlingson. vnunet.com, 05 Jul 2008. Type: time limited demo
http://www.vnunet.com/vnunet/downloads/2128946/outpost-firewall-free1-01HOME

the pc that is doing the ics should be OK, the remote pc(s) that is(are) getting it's connection via that pc should have OP on it for outgoing protection, the two hardware routers/firewalls will do most of the incoming protection, with op's incoming protections thus having less of a load.

as long as the other pc(s) is(are) really trusted, as in it's(they're) in your control, that should be that. if you are not sure the ics pc should trust the other pc(s) completely, you could try just ticking the nat box on the ics pc, you'd then have to write system rules to cover any access from the other pc(s). if file & print sharing is not required, you can untick netbios as well.

i think i'll take an ibuprofen now and unwind my brain a bit...

ok check this out here is my settings. i take it that when it says 192.168.0.0 that it stands for 192.168.0.0-192.168.0.255 is trusted and on nat?? this is my set up ipconfig and op 09 lan settings i am posting maybe some help or pointer on fixing this issue. i can disable the firewall and get on the other pc and post a snap shot of the config of the router if need be. plz help. i wish there was a ics and net sharing check box and it let you pick your net work. i think thats what trusted and nat is all about but its not working. also whats this error about if i just want to add a single ip to trust (its just for networks not singles that why my net statement is right?). i am taking it that if it is 192.168.0.0 it means the hole thing is trusted

also why dont you have jpg as a file extension??

have you ticked the NAT box in the LAN settings for the IP/subnets? see attached. each lan should have an entry for the ip range (x.x.x.0 subnet 255.255.255.0 for class c), netbios box is optional (reqd for file & print sharing), trusted and nat should be ticked, (nat req'd for ics).

Thank you for your help and your input. its a crazy setup i know. :)