InJoy Firewall for Windows 2000, Windows XP, Windows 2003, Windows Vista. Platform specific configuration and installation README. ========================================================================== C O N T E N T S ========================================================================== 1.0 Prerequisites 2.0 Installation issues 3.0 System Implications 4.0 Manual Installation 5.0 Manual Deinstallation 6.0 Trouble Shooting ============================================================================== 1. P R E R E Q U I S I T E S ============================================================================== You are about to install a product that adds new device drivers to your Windows system. The device driver layers with existing device drivers shipped with your LAN adapter(s) and incompatibility or bugs in these drivers CAN potentially cause hazard to your Windows system. If you are NOT experienced in the following areas: * TCP/IP networking and routing * Windows recovery options (i.e. Safe mode) THEN please backup critical data before installing this software and/or consult a local expert or seek help on the Internet. F/X Communications will in no way be held responsible for malfunctions or data loss inflicted by our software. 1.1 Supported Software ---------------------- InJoy will run on any of the below Windows platforms: * Microsoft Windows 2000 * Microsoft Windows 2003 * Microsoft Windows XP, 32-bit and 64-bit variants * Microsoft Windows Vista, 32-bit variant 1.2 Supported Hardware ---------------------- InJoy requires a LAN card with an NDIS 5 compliant driver. The InJoy Firewall has been tested with a multitude of Network Adapters on Windows. Below a small list of (some of) the tested adapters: * D-Link AirPlus G DWL-G122 Wireless USB Adapter * D-Link AirPlus EtremeG+ DWL-G650+ Wireless Cardbus * 3Com Fast EtherLink/EtherLink XL Family * 3Com 3C905xx (100Mb PCI Adapter) * 3Com 3C920 Integrated Fast Ethernet Controller (notebook model) * 3Com Etherlink III 16BIT-ISA * 3Com MegaHertz, model 3CCe589EC (PCMCIA) * RTL8029 / RTL8139 PCI Ethernet Adapters * D-Link DL2000-based Gigabit Ethernet Adapter * Orinoco Gold (Wireless card) - PCMCIA model, through Ricoh Cardbus * NVIDIA nForce MCP Networking Controller (mainboard NIC) ============================================================================== 2. I N S T A L L A T I O N I S S U E S ============================================================================== 2.1 General ----------- When running the install.bat installation script several device drivers will be installed. Windows will ask if it should continue installing the unsigned driver. Choose "continue" or "Yes" for all prompts. InJoy must be run and be installed with administrator rights. 2.2 Compatibility issues ------------------------ The Windows Routing Service should be disabled while using InJoy. The Routing service is a normal Microsoft service that is used to provide "IP forwarding" services in the Server version of Windows. To use IP Forwarding with the InJoy products, use the included "ipgate" tool (e.g. "ipgate on" to turn it on). The ipgate tool updates the registry entry. You cannot firewall LAN connections that have been bridged. Do not use the task manager's "End Process" feature on gateway, it does a brutal kill of the process and does not allow for it to clean up. Windows installs and runs its own version of IPSec. To use InJoy's IPSec, turn Windows IPSec off in the list of Services. On W2K, the Services are located here: Start->Settings->Control Panel->Administrative Tools->Services Locate the IPSEC Policy Agent and stop the service. Changing the service to 'Manual' prevents future auto-starting of the service. 2.3 Upgrade issues ------------------ When creating the menu items on the Start Menu old items are not destroyed so if you are upgrading from a previous install, you should either run the uninstall script or manually remove the old menu items to ensure there are no obsolete shortcuts. ============================================================================== 3. S Y S T E M I M P L I C A T I O N S ============================================================================== InJoy installs several NDIS device drivers. (2 hidden virtual NDIS drivers and 1 NDIS intermediate driver). InJoy's ipgate utility sets a registry key for enabling IP forwarding. ============================================================================== 4. M A N U A L I N S T A L L A T I O N ============================================================================== 3 Drivers must be installed using the "Add New Hardware" control panel applet. The 3 drivers are in subdirectories named "fx", "fxdod" and "driver". Choose a network device type from the list, and choose the "Have Disk" push button. Using the file dialog find one of these directories. When it prompts you that you are about to install an unsigned driver, click the "continue" push button. Repeat until you have installed all three drivers. Copy the file gateway.cn_ to gateway.cnf in the "config" subdirectory and modify to your liking. Then from the installation directory run "fxinst -a" to choose the LAN interface you wish to firewall if you have more than one. ============================================================================== 5. M A N U A L D E I N S T A L L A T I O N ============================================================================== The three drivers that were installed can be uninstalled from either the network connections object or the device manager. To uninstall the filter driver choose the network connections item from the Start menu's settings fly out menu. Right click on one of your LAN adapters and select properties. In the list of items installed on this connection, find the "F/X Communications Network Filter Driver." Select it with the mouse and click the "Uninstall" push button. Confirm the uninstallation. Next we move to the virtual adapters. These are located in the device manager. Goto the Control Panel and double click on the system object. Select the "Hardware" tab and then click the "Device Manager" push button. These devices are hidden so pull down the "View" menu and check the "Show hidden devices" menu item. Click on the "+" next to the "Network Adapters" item in the list. Locate the "F/X Communications NDIS Adapter" and right click on it. Choose "Uninstall" from the context menu. Then find the "F/X Communications DOD NDIS Adapter" and repeat. ============================================================================== 6. T R O U B L E S H O O T I N G ============================================================================== Q: When I try to start the Firewall Server, the following message appears: Error: Incomplete Installation: File Missing :IFACE.LST Error: Defaulting to FXWRAP interface index 1 InJoy Firewall, Copyright (C) F/X Communications gateway version 3.0 (2) Fatal: Unable to determine hardware address of LAN adapter. Press a key to exit... A: There are several possible problems and solutions: 1. Make sure the file iface.lst is located in the base directory of the InJoy Firewall folder. If the file doesn't exist or has 0 length, type: "fxinst -a" Run the command in the base directory of the InJoy Firewall directory to re-scan available network adapters and to create iface.lst. 2. The currently logged-on user may have restricted access to the InJoy Firewall folder on the NTFS volume. InJoy Firewall can be used only with Administrator permissions. 3. The Network adapter on which InJoy Firewall was installed has been changed. Either the driver of the adapter has been changed or the adapter itself has been reinstalled. Use "fxinst -a" to re-reinstall the InJoy Firewall to the relevant adapter. 4. Try to reboot, to activate the driver, and run install again. Q: Can I manually install and uninstall the toolbar application? A: Yes, while the InJoy Firewall Deskbar is installed by default, then you can manually uninstall (and re-install it). Here is how: Uninstallation of the InJoy Firewall Deskbar: - regsvr32.exe /s /u \FXDeskBar.dll Installation of teh InJoy Firewall Deskbar: - Put FXDeskBar.dll into the relevant firewall directory. - Type "regsvr32.exe /s /c \FXDeskBar.dll" (you don't need to type the path if it's the active working directory). - Rright click the Windows taskbar and select InJoy Firewall Deskbar from the toolbar submenu. (Notice: You may need to open this submenu to see the InJoy deskbar).