Kerio Firewall and LANs

I am trying to get my LAN working with Kerio running on an XP machine but am having problems with it letting the two machines talk:

I have a Win98 machine with IP 192.168.200.2 and the XP with 192.168.200.1 (subnet mask 255.255.255.0).

SO, I went into Kerio Admin's 'Firewall Config' options (under 'Advanced' button) and chose the 'Microsoft
Networking' tab. I added a 'Trusted Address Group' of 192.168.0.0/255.255.255.0 to allow the Win98 machine
to have folder and printer share access by ticking off 'Allow Other Users to Access My Shared Folders/Printers' and 'From Trusted Addresses only' boxes. But it still doesn't allow the two to talk.

Is there something else I still have to set/unset to get the firewall to allow the two IPs to connect?

Thx,

 

I have a Win98 machine with IP 192.168.200.2 and the XP with 192.168.200.1 (subnet mask 255.255.255.0).


I had XP and two 98 machines. The IPs are supplied by DHCP of of my Router.

They are 192.168.1.100 - 103 and 255.255.255.0.

XP picked them up and ran with them with no help from me.

No problems with Kerio at all. I just needed to yes you can or " no way Jose. "

Billybob

 

Don't have a router ..yet (too expensive for me right now). So I had to assign the IPs to get my PCs to talk.

er.. what do you mean 'yes you can'? When did Kerio prompt you?
I get no prompt from it when I try to access the shared folders... just tries for a bit then says it can't find the other PC. But IF I close/exit Kerio, I can access them fine?

Thx,

 

When ever I tried to go out to another machine or they tried to get to me to play a game. Kerio would come up and ask about allowing or not.

I am wondering about too many numbers in the IP addresses you are asigining.

Note the difference in mine and yours.

BillyBob

 

Do you mean the '200' in 192.168.200.1, 192.168.200.2? Does that really matter?

In any event, I unchecked the two boxes I mentioned and now I CAN see the Win98 from WinXP and access the shared folders,
*BUT*
NOT vice versa. When I try to access the WinXP machine from Win98 it tries and then says "Computer or sharename cannot be found ". Kerio doesn't even prompt to allow/disallow access. The Win98 machine just can't get through when the firewall is on (does as soon as I close Kerio).

Only works one way at the moment. Something must still have to be set?

 

Forget about the numbers. I just looked back and see that I read wrong

'Trusted Address Group' of 192.168.0.0/255.255.255.0

Am I reading wrong ( again ) or is 192.168.0.0 the wrong address for the 98 machine. ?

Isn't 192.168.200.2 the 98 address ?

I am back on XP so I can see what is what.

In Kerio Firewall~advanced~MS Netwrking I have 192.168.1.101 & 192.168.1.102 ( Both 255.255.255.0 ) which are the IPs of the other two machines.

BillyBob

 

I just did a test run and set a drive on this XP machine to be shared.

Went to the 98 machine and it was right there. I could run setups and all.

NO !! I did not share the C: Drive.

I made that MISTAKE once and hope not to again.

BillyBob

 

Your subnet mask and network IP address indicates that the trusted network is

192.168.0.zzz


The subnet mask and network IP addresses that you have set on your computers is

192.168.200.zzz

Kerio is not trusting the right network.

In Kerio, go to Firewall Configuration - Microsoft Networking tab and add the correct network to the trusted address group.

 

Yeah, I understood that afterwards and had changed it accordingly BUT still couldn't get the Win98 machine to see WinXP (even when putting the EXACT IP addresses), sooo, reading ahead...

--

Well, I decided to uninstall and reinstall Kerio and try it anew (since now I have a better idea of how it works). I then was prompted to accept access from the Win98 machine, said Yes. I tried accessing WinXP thru Net-Neigh and pinging it, Kerio again asked me if I wanted to allow these, said yes. NOW it works FINE!

Must have been something else wrong somewhere.


SO:
now in Kerio Firewall~advanced~MS Netwrking, this is what was put in:

-The first 5 boxes are checked
-I have 192.168.1.0 / 255.255.255.0)

(the '0' at the end allowing any number with the first three sets, of course).


DANG! ... Case Closed. <STAMP!>

...

Arg... broke my Stamper... <Sigh>

 

Glad to read you have it fixed up.

Getting the LAN too work properly has always been one of my toughest jobs.

I even had the Workgroup named MSHome. But on one machine I put in mshome. I guess that one did not want to join the party with the rest of us.

BillyBob

 

Your XP machine already has C shared. No way to not have it that way. Shared as C$ but requires admin rights to the XP box to use it.

All NT systems automatically do an admin share of all drives at install time.

 

OK. Then where does it show me that is shared ?

Are we talking a about a different sharing ?

Am I missing something ?

I see no little hand under the H: Drive Icon Like I did when I had it shared. In fact no little hand anywhere. Other than the Printer.

My C: drive is not shared via the LAN. I just fired up a 98 ( Nancy ) machine and the only thing that shows from this machine ( Bob ) as being shared is the Printer as HP.

And that is all that is permanenty shared.

Nothing else from Bob is visible to Nancy.

Nothing like BC or BH which I name the drives when I share them. That way I know which Machine they are on just by the name.

B? for Bob. N? for Nancy. R? for Rip.

Gotta get ready for our Tuesday evening Golf game will check back later.

BillyBob

 

And it is shared for LAN access. Just set not to show up. Any share name ending in $ will not be visible on the network but can be mapped and used like any other share. You just can't get there from Network Neighborhood.

If your XP PC is BOB and it has a C drive, you can go to the 98 PC and do start~run~\\bob\c$. If the user logged on to the 98 PC has admin rights on the XP PC, the C drive will open up in windows explorer. Same for any other drive letters.