BT Internet access from BT Ipaq

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › BT Internet access from BT Ipaq

fgoulding

4 posts

Wannabe Geek
Inactive user

#3054 30-Dec-2004 00:50

Dear all,

I've followed the excellent BT guides on Geekzone and have managed to get Ativesync over BT working with my desktop PC. However, I just can't get my Ipaq to connect with my Broadband (DSL) connection.

My BT settings on my PC and IPQA look good (I can ping 192.168.0.1) but my Internet connection uses a static IP address (217.40.11.xx) and I can't access the net. I can't ping the router and I'm guessing that I need to bridge the BT LAN connection with my Internet connection.

My firewall isn't causing any issues since modifying the permissions.

Any assitance would be greatly appreciated as this is driving me nuts!

Thanks, Fin..

freitasm

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#11416 30-Dec-2004 09:16

If you're connected and can ping 192.168.0.1 then you should be able to ping external sites.

First make sure to enter the ISP's DNS server address in the Bluetooth adapter network configuration.

Since the connection is established we can assume your ICS configuration is ok, otherwise the Pocket PC wouldn't connect.

Then try pinging www.wired.com by name and by IP address from your Pocket PC. If it does not work then you probably have to check your firewall settings again - including Windows XP SP2 firewall if this is the case.

fgoulding

4 posts

Wannabe Geek
Inactive user

#11432 31-Dec-2004 09:25

Thanks for the tips. I can now ping 192.168.0.1 and I can ping my desktop & router. So it's a firewall problem. I have disabled XP's Firewall but I'm loathed to disable my ZoneAlarm protection. I wonder if anyone knows what settings are required in ZA to allow Internet access from a PPC?

Thanks,

Fin...

freitasm

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#11433 31-Dec-2004 09:50

How many computers do you have behind the router? Is this a NAT router? Do you have any port forward enabled on this router, going to your computer?

If you can turn off the other computers, and if this router is a NAT router (which most home routers are), and if you don't have port forwarding, then you can safely disable Zone Alarm to test this.

That's because no one from the Internet can enter on your computer without breaking into the router first. Worms won't do it because the router's OS does not support their "environment". Scripts will not go through the NAT. Only hackers doing a manual job would care - would they?

Zone Alarm and other personal firewall software, in my opinion, are needed when you're connected directly to a broadband line without a router. Of course they do a job most routers don't, which is blocking outgoing connections as well. This is great to stop zombie networks, but we should do a better job preventing programs to be installed than trying to stop programs after installation. Of course this is my point of view.

fgoulding

4 posts

Wannabe Geek
Inactive user

#11440 31-Dec-2004 10:53

Thanks for your patience!

I have a no-NAT router from British Telecom because I have a static IP address in order to host a web server which is exposed to the Internet. In fact I have 5 static addresses.

There are three PC's connected to the router and all are ok.

I've been messing about with ZA today and it has clearly blocked the outgoing ping to www.wired.com (it's blocking all ICMP messages as detailed in the firewall log). So now I'm trying to find a way to allow the PPC to be viewed as a trusted device....

Regards, Fin..

freitasm

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#11441 31-Dec-2004 10:56

Ok, so you do have a different requirement... Hope you can find how to configure the ZA for this. You can start by trying it in Medium Level.

fgoulding

4 posts

Wannabe Geek
Inactive user

#11458 31-Dec-2004 22:18

Medium level worked! But I'd still like to know why ZA is blocking my outbound connections. Medium level makes my PC visible to the outside world whereas High Level provides stealth mode.....

freitasm

BDFL - Memuneh
79253 posts

Uber Geek

Administrator

ID Verified

Trusted

Geekzone

Lifetime subscriber

#11459 31-Dec-2004 23:45

I wouldn't worry about stealth or non-stealth. There are lots of discussions about the benefits and non-benefits of one or another. It's hard to establish the preferences.

In fact I believe some RFC mandate systems on the Internet to reply to any port probe with CLOSED or accept a connection. Stealth simply drops the connection, and sometimes the other system will probably wait for a response for a certain time - leaving the connection open on their system until the timeout is reached. It doesn't seem fair, but these days you never know.

Also, if you're not stealth, the other system will receive CLOSED, meaning just that.