Help with internet setup

[ZenZimZaliben]

Take switch, throw in closet.
Plug PC directly into router, most have at least 4 ports.
Log into router
Go into advanced settings, usually, assign the IP you want in the DMZ a static ip within the IP range.
Reboot router
Go into network settings on PC and assign that same IP address as a static IP.
Now that pc is in the DMZ.
Everything else will be on dynamic assigned IP's.

 

[reverze]

Right.. or you can look at it like it's forwarding ALL ports to the ip you specify instead of going in to port forwarding and forwarding individual ports. (which sounds like the part you despise) But you will only need to set it up the one time.

Sounds like an easier method to me. Hmm..

 

[mordant80]

putting your desktop you use everyday in the DMZ is playing with fire. you are better off learning all about your router and port forwarding.

True, but it's no worse than the original thought of the PC having an actual ip address from the isp..

He will want a firewall running on the pc for sure.

 

[Zebeon]

Take switch, throw in closet.
Plug PC directly into router, most have at least 4 ports.
Log into router
Go into advanced settings, usually, assign the IP you want in the DMZ a static ip within the IP range.
Reboot router
Go into network settings on PC and assign that same IP address as a static IP.
Now that pc is in the DMZ.
Everything else will be on dynamic assigned IP's.

Exactly.... but be aware.... you are open to the internet that way.. and could get hacked and all kinds of bad stuff.... don't keep any important on it be CAREFUL.

 

[ZenZimZaliben]

Yeah, ok if you work for the NSA, NASA or hold massive trade secrets, then yeah, learn port forwarding. Other wise, who cares, especially if you power your pc off nightly.

Also, use an extra step. Use MAC Address filtering.

 

[reverze]

Thanks ZenZimZaliben.

 

[Easy Rhino]

i dont want to turn this into a flame war over PC security but if your desktop is open the the whole world someone will find it and attempt to hack it. it is that simple. your windows firewall wont do crap against any real attempt to hijack your box. before you know it they have all of your personal information and are running a botnet to hijack other computers. or even your computer could become a zombie attacking things like the NSA. and you dont want the NSA to trace your PC back to you when you more than likely have illegal things on it.

 

[reverze]

I want to test something..

Does anyone have the Call of Duty 4 or 5 ports that need to be opened?

 

[Zebeon]

i dont want to turn this into a flame war over PC security but if your desktop is open the the whole world someone will find it and attempt to hack it. it is that simple. your windows firewall wont do crap against any real attempt to hijack your box. before you know it they have all of your personal information and are running a botnet to hijack other computers. or even your computer could become a zombie attacking things like the NSA. and you dont want the NSA to trace your PC back to you when you more than likely have illegal things on it.

Agreed-

 

[ZenZimZaliben]

i dont want to turn this into a flame war over PC security but if your desktop is open the the whole world someone will find it and attempt to hack it. it is that simple. your windows firewall wont do crap against any real attempt to hijack your box. before you know it they have all of your personal information and are running a botnet to hijack other computers. or even your computer could become a zombie attacking things like the NSA. and you dont want the NSA to trace your PC back to you when you more than likely have illegal things on it.

Sure it could\might\may happen. Chances are miniscule, especially for a PC that is powered off after use. I could be stuck by lightning. A meteor could hit me in the head.

All security is a deterrent. IF someone wants in, they will get in. Regardless. People looking to run botnets/zombies are looking for PCs that are on all the time.

Not saying you will or wont get hacked, but the chances are very low.

One thing I want to say though. I use the DMZ a lot. I do not use the machine in the DMZ for anything other then games. No torrents, no warez, no Pron, nothing on the HD except the OS and the games I am playing\hosting. It's easy enough to toggle the DMZ active/inactive.

 

[Easy Rhino]

Sure it could\might\may happen. Chances are miniscule, especially for a PC that is powered off after use. I could be stuck by lightning. A meteor could hit me in the head.

All security is a deterrent. IF someone wants in, they will get in. Regardless. People looking to run botnets/zombies are looking for PCs that are on all the time.

Not saying you will or wont get hacked, but the chances are very low.

chances are not as low as you may think. criminals take the path of least resistance. if you dont use a router/firewall then you are making it MUCH easier for some script kiddie to get onto your system. that means he attacks your open box rather than my secure box.

One thing I want to say though. I use the DMZ a lot. I do not use the machine in the DMZ for anything other then games. No torrents, no warez, no Pron, nothing on the HD except the OS and the games I am playing\hosting. It's easy enough to toggle the DMZ active/inactive.

well that is one of the smart ways to use DMZ. it is highly controlled. reverze tho wants to put the desktop he uses for everything on dmz!

 

[reverze]

So you guys use a router and just unblock the ports then?

 

[CAPITAL LETTERS]

Right.. or you can look at it like it's forwarding ALL ports to the ip you specify instead of going in to port forwarding and forwarding individual ports. (which sounds like the part you despise) But you will only need to set it up the one time.

forwarding all ports to the host PC is basically exactly the same as a DMZ really.

both ways, you are letting in every incoming connection

 

[ZenZimZaliben]

No, that is not true. Sure if you foward EVERY port but there are 65535 ports. You only open the ones you need for gaming. The ports you need to worry about are much lower..

 

[zithe]

If you connect in this order Modem > Router > Switch, the switch will be able to assign IP addresses.

 

[Mussels]

routers with NAT are a heavy security device. Traffic can only come in through an open port - that means if you havent got port forwards, it requires an outbound connection before traffic is allowed back in (this is why people without forwards can join games online, but cannot host them)

Virus/worm attacks are the same way - if you have a router and you havent got DMZ, many worms and viruses will simply be unable to get into your network.

 

[reverze]

If you connect in this order Modem > Router > Switch, the switch will be able to assign IP addresses.

Yeah.. maybe this way would be worth a shot?

 

[Mussels]

switches dont assign IP addresses.

 

[reverze]

How about a good tutorial on opening up ports?

I found this site

and tryed it out.. but it seemed it didn't work when the COD5 server list still wasn't populated but a few servers showing up..

 

[mrhuggles]

wish i could give you a test drive of my router, its nothing like the routers your probably used to its fast and it never fails, i have not had to reboot it 1 single time ever, it runs an embedded linux OpenWRT, oh and also it has a nice web interface X-Wrt i like to run whiterussian even tho its pretty dated, since the web interface is much better on it, or atleast it was last time i tried kamikaze

 

[mordant80]

i dont want to turn this into a flame war over PC security but if your desktop is open the the whole world someone will find it and attempt to hack it. it is that simple. your windows firewall wont do crap against any real attempt to hijack your box. before you know it they have all of your personal information and are running a botnet to hijack other computers. or even your computer could become a zombie attacking things like the NSA. and you dont want the NSA to trace your PC back to you when you more than likely have illegal things on it.

I just don't understand the major aversion to the windows firewall... sure it won't block outbound. But is DOES block inbound connections, and it does it just fine. It absolutely WILL do crap against a real attempt to hijack your box. The problem is if you have something nasty on your PC already.. it will be able to get out. But hey, the routers NAT firewall won't block the outgoing stuff either.

To sum it up, the windows firewall will do it's job just fine.

 

[mrhuggles]

the reason people dont like windows firewall is very simple
a router is gonna block EVERYTHING except what you spesificly forward ports to [incoming anyways]
windows firewall is going to block EVERYTHING except what programs want... thats teh thing tho, if a person connects to you on a port you dont have anything open on, it wont do anything anyways since nothing is listening, it is good enough to block vulnerable ports, windows firewall can do this, but does it by default? that depends on your configureation but for the vast majority of people, no it does not, like say netbios, it will leave netbios open to LAN connections but will automaticly close it off to WAN connections except broadband connections are almost always going to register in windows as a LAN connection, because of how they connect, that exact same issue is a problem in internet explorer too since it treats LAN differently than WAN so it wont block almost anything

but yeah, windows firewall is good enough so long as you configure it.

 

[zithe]

switches dont assign IP addresses.

With a router it will work. I've done it at countless LAN parties lol. I dunno which one is assigning the addresses (Probably the router since it only works when it's connected to one)
but it's always what I do at LAN parties. I have half the group on the router and the other half on the switch.

 

[mrhuggles]

router on a LAN with the main box, main box getting IP from DHCP or PPPOE [main box will have 2 ips on the same interface] might as well just use ICS and put the main box infront and hook the router up to a second LAN port on the main box instead of with a switch since you would have to use ICS to share internet with the router anyways [it will be LAN to the main box NOT WAN to the modem!]

 

[Mussels]

With a router it will work. I've done it at countless LAN parties lol. I dunno which one is assigning the addresses (Probably the router since it only works when it's connected to one)
but it's always what I do at LAN parties. I have half the group on the router and the other half on the switch.

its the router. switches merely pass through the traffic, they're a 'dumb' transparent device.