+ Reply to Thread
Results 1 to 5 of 5
  1. #1
    Member sulusulu's Avatar
    Join Date
    Oct 2001
    Location
    Wisconsin
    Posts
    210

    Question Firewall does not ID network properly

     
    I need to secure a windows 7 laptop that has to be able to share files and printers when on my home network but have the firewall locked down when not on the home network. This seems to happen with both Comodo Firewall and the built in Windows firewall.

    The problem that I have is that firewall software that I have used in the past seems to only use the router ip/subnet of the network to tell which network it is connected to. i.e. Home vs. Public

    This means that if the laptop firewall is set to enable a "Home" profile when connected to a home network and you then connect to a network in a coffee shop that uses the same router ip/subnet of my actual home the laptop would than be susceptible to a wide variety of attacks like people trying to log in to windows remotely.

    Any ideas on how to properly secure this laptop? Is there any (free?) firewall software that is more advanced in how it IDs the network.

    The laptop is running Windows 7 Home Premium.

    Thank you!
    Last edited by sulusulu; June 7th, 2012 at 10:06 PM. Reason: Edited to fix dumb mistake.
    Accept that some days you're the pigeon, and some days you're the statue. -- Scott Adams

  2. #2
    Super Stealthy Moderator RicheemxX's Avatar
    Join Date
    Jan 2003
    Location
    Outside the box
    Posts
    8,489
    Blog Entries
    4
    I don't recall the W7 firewall only using the router ip/subnet to determine which networks to allow connections to. As you said that would be utterly pointless as almost all routers by default use the same ip scheme create the same subnets. AFAIK it asks according to each connection ID or MAC address. Say for instance I change my router ID at home, I'm asked again to setup my type of connection. Even though my router is the same, same IP, subnet ect.

    This means that if the laptop firewall is set to enable a "Home" profile when connected to a network in a coffee shop that uses the same router ip/subnet of my actual home the laptop would than be susceptible to a wide variety of attacks like people trying to log in to windows remotely.
    Well yeah, obviously if you "allow" it to connect to setup a "home" or "trusted" connection it would by default us the same settings it would when connected to a trusted network. It should by default however ask you which type of connection you want. And IMO it should never be a home connection.

    Or maybe I'm just confused on what you are saying

    TechIMO Folding@home Team #111 - Crunching for the cure!
    “Because The People Who Are Crazy Enough To Think They Can Change The World, Are The Ones Who Do.”

  3. #3
    Member sulusulu's Avatar
    Join Date
    Oct 2001
    Location
    Wisconsin
    Posts
    210
    Quote Originally Posted by RicheemxX View Post
    Well yeah, obviously if you "allow" it to connect to setup a "home" or "trusted" connection it would by default us the same settings it would when connected to a trusted network. It should by default however ask you which type of connection you want. And IMO it should never be a home connection.

    Or maybe I'm just confused on what you are saying
    Opps... That was supposed to say:
    This means that if the laptop firewall is set to enable a "Home" profile when connected to a home network and you then connect to a network in a coffee shop that uses the same router ip/subnet of my actual home the laptop would than be susceptible to a wide variety of attacks like people trying to log in to windows remotely.
    I could be wrong about the windows firewall but I will check again to be safe. It's been awhile since I used my laptop outside my home. (I'm setting up someone else's laptop)

    Thanks for your help.
    Accept that some days you're the pigeon, and some days you're the statue. -- Scott Adams

  4. #4
    Super Stealthy Moderator RicheemxX's Avatar
    Join Date
    Jan 2003
    Location
    Outside the box
    Posts
    8,489
    Blog Entries
    4
    With W7 the very first time you connect to each connection you should always be asked what type of connection you are connecting to. Home, Work, or Public. So your firewall settings would be set for whatever connection type you select.

    So assuming you are going to a public access point. The very first time you connect to that new connection with a new SSID, router and network ID (maybe even mac address) it should ask you which type of network you want. Home, Work or Public.

    The IP/Subnet ect of the router makes no difference at all. AFAIK it all plays off the network ID and router's mac address.

    TechIMO Folding@home Team #111 - Crunching for the cure!
    “Because The People Who Are Crazy Enough To Think They Can Change The World, Are The Ones Who Do.”

  5. #5
    Banned
    Join Date
    Feb 2009
    Location
    KFNL FS2004
    Posts
    11,886
    Blog Entries
    1
    In Comodo you can add the MAC address as the network zone. It should go by MAC address.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Network Firewall
    By jentzsch in forum Networking and Internet
    Replies: 14
    Last Post: May 16th, 2005, 06:25 PM
  2. Sygate Firewall - Network Neighborhood...
    By Namie in forum Applications and Operating Systems
    Replies: 0
    Last Post: October 4th, 2004, 06:07 AM
  3. Cant get Network to work properly on all three PCs
    By Makaze in forum Networking and Internet
    Replies: 8
    Last Post: May 30th, 2004, 06:07 PM
  4. Network firewall
    By frustrated^23 in forum Technical Support
    Replies: 6
    Last Post: September 10th, 2002, 11:49 AM
  5. Help with network/Sygate Personal Firewall
    By Taff in forum Networking and Internet
    Replies: 3
    Last Post: March 18th, 2002, 03:46 PM

Tags for this Thread

Posting Permissions

  • You may post new threads
  • You may post replies
  • You may not post attachments
  • You may not edit your posts
  •  
Recommended Sites: ResellerRatings Store Reviews