My Network Configuration

A network configuration that I used in my security research is depicted on the Figure below.
 

Network configuration used for research in this book.

There are several things to notice here. IP addresses on the production Windows NT 4.0 network may be either fixed or obtained via DHCP. A special Linux firewall machine with 2 network cards isolates the experimental Windows 2000 network from production network. Windows 2000 network is using 192.168.2.x IP addresses. Linux firewal is configured to masquerade outgoing traffic so that users of Windows 2000 network could browse the Internet (via the firewall machine). Also, SAMBA server software runs on the Linux firewall machine to enable Windows NT 4.0 and Windows 2000 users to access files there. This is useful if you need to transfer files between the 2 networks.

The following sections elaborate more on installation procedures.