Vunerable to attack behind a NAT server + ZA question

[Desslok]

Is it possible for someone to get into a network that is using a NAT server as the main conntection to the web? All my addresses behind the nat server are basically picked at random so they are not close to default settings.

I have a mapped drive and whenever I turn on Zone alarm even with the local settings on low I cannot acces the mapped drive. Any ideas? Both Machines are running XP Pro


Thanks for helping a newbie,
Chris

 

[n0cmonkey]

<< Is it possible for someone to get into a network that is using a NAT server as the main conntection to the web? All my addresses behind the nat server are basically picked at random so they are not close to default settings. >>



Yes, its possible. It wouldnt be easy though.

 

[Desslok]

Thanks n0cmonkey, I am mainly worried about script kiddies being able to hack in. I was also thinking of using a old Pentium II 233 as a stand alone firewall. Does anyone have any good suggestions? I was planning on going with a Linux firewall that fits on a floppy.

Chris

 

[n0cmonkey]

<< Thanks <STRONG>n0cmonkey, </STRONG>I am mainly worried about script kiddies being able to hack in. I was also thinking of using a old Pentium II 233 as a stand alone firewall. Does anyone have any good suggestions? I was planning on going with a Linux firewall that fits on a floppy.

Chris >>



Most script kiddiots wouldnt be able to get through... Well not until a script or something becomes available. I havent seen anything yet, and it would depend on what is doing the NAT for you. The Linux Router Project is a decent solution from what I hear. I personally use OpenBSD and IPF on a p133.

 

[Desslok]

Cool I will look into it.