Currently to get my XBOX online, I have to use my Cable/DSL router. I still only have one IP assigned to my router, which means NAT is handling the addressing of the console and the PC needed to run the online tunnel software.

I have never tried to run the XBOX online with no NAT and one IP on a hub (may try it home this weekend). But with my current configuration, the security that NAT and simple router port blocking provides probably makes my XBOX more secure than some broadband-connected home computers out there.

The security hole in this setup is the PC running the tunnel software. I run it as a DMZ because I am too lazy to find out and open all the ports the tunnel software needs. I remove the PC from the DMZ when done gaming, but during the game I only have my W2K patches protecting me. Crikey!

Microsoft's XBOX online service is due out this year. It will be interesting if they will require a PC for their config's.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/articles/490/13168#13168