I haven't experimented with this aspect yet, but I've seen reports from
others that atleast in *domain* environments, SP2 configures the firewall
automatically to permit local (only) file-sharing.  It probably should do
that for workgroups as well.

> ....  I know in the pre SP2 documentation for the Windows XP Firewall,
> it recommends when using Internet Connection Sharing to only enable the
> firewall on the ICS computer.

  That sounds like a mistake.  While ICS does NAT, I don't think it extends
firewall protection to its clients -- and even if it did, much of the power
of a local software firewall would be lost.

David Gillett


On 31 Aug 2004 at 22:15, Harry Lichtbach wrote:

> What about the growing number of home networks?  Workgroup based, Peer-to-peer
> file and printer sharing networks?  I know in the pre SP2 documentation for the
> Windows XP Firewall, it recommends when using Internet Connection Sharing to
> only enable the firewall on the ICS computer.
>
> What about home networks using a router (and not using file/printer sharing?
>
> On Mon, 30 Aug 2004 20:09:03 -0700, David Gillett <[log in to unmask]>
> wrote:
>
> >  With SP2, Microsoft is largely "pre-hardening" XP, so that users don't
> >need to be experts to be protected.
> >
> >  So, in general, the people who might have problems with SP2 know who they
> >are, and have less need of it than the average user.   (If you are inside a
> >company or institution, you should ask your IT department about this.)
> >
> >David Gillett
> *-*-*-*-*-*-*-*
> Harry Lichtbach
> Almaden Unlimited
> San Jose, CA. USA
>
>              Do you want to signoff PCSOFT or just change to
>                     Digest mode - visit our web site:
>                    http://freepctech.com/pcsoft.shtml

              The NOSPIN Group is now accepting donatations
              to continue providing PCSOFT and our website.
           Visit http://freepctech.com to donate using Paypal