troubleshooting Question

What Standalone Firewall? ComputerWith2XNic's or an off-shelf Router?

Avatar of RalphG
RalphG asked on
Windows Networking
32 Comments1 Solution797 ViewsLast Modified:
I have been asked to setup a firewall. The only firewalls I have setup before are software based that include an application spawning sandbox etc and have all been on a Win2000 workstation acting as a server for less than 10 users. I am very familiar with such firewalls but not at all familiar with any version of windows that are in the server family SBS, NT, Win2000S.

The firewall I have been asked to do is for a computer that is running Small Business Server 2000.
The computer is not connected directly to a broadband modem etc but (Apparently) is plugged into an RJ45 wall socket that supplies the entire building (multiple companies) with the internet (I have no idea what this could be any ideas are gratefully received).
The staff are in a pickle about not having an external (to the SBS computer) firewall (management has decided it wants one) and cannot find out much about the system they have as they are not very technical so please excuse my lack of information.

So I need to put a firewall between the SBS computer and the RJ45 jack in the wall that provides the broadband. This all sounds good to me as I am less likely to cause problems with the SBS computer software of which is alien to me. Unfortunately the staff have just realised that there other branch link to there one via a VPN (I don't know the security type IPSEC?).

QUESTION 1A:
Can I build a Windows 2000 workstation (I don't know Linux) with two network cards in it and a software firewall and place it between the SBS computer and the Wall to allow ALL traffic, except that blocked by the firewall, to parse through from the WAN adapter to the LAN adapter? - Thus creating an external, to the SBS computer, firewall. I believe this is also called a sandbox.

QUESTION 1B:
If so do I just use the ADD ROUTE command to throw everything from the WAN adapter to the LAN adapter, except 127.0.0.1 and the local machine IP, and use the software firewall to do its business?

Question 2A:
Should I use an off the shelf combined firewall router with an RJ45 as the WAN instead of the standard (Remember I am only use to small systems) broadband telephone RJ11 port?

Question 2B:
If so what one? OK, just a hint or personal favourite then!


I have put 500 points on this because its urgent and you can bet someone answers with something I wont understand and I will need the idiots walk through guide : )

Thanks for your help in advance, Ralph.
Join the community to see this answer!
Join our exclusive community to see this answer & millions of others.
Unlock 1 Answer and 32 Comments.
Join the Community
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 32 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros