Yes. So long as you do not have a default gateway set on any interface, and
have no static routes, there is no way for it to communicate with any
destination that's not at an address belonging to the same network as its
interface IP(s). It won't know what to do for a return path for any inbound
packet (but it WILL potentially receive them if your firewall forwards
something to it, though in practice this would only matter for UDP, as it
won't be able to complete a 3-way handshake to establish a socket for TCP
communication), and it won't know what to do with an outbound destination.
You could enable Windows Firewall and turn off any inbound exceptions as
well. 

So, unless you have some sort of proxy (including something like stunnel)
running on another host on your local network, it is largely isolated from
the public. This applies to IPv4 anyway--IPv6 has some magic extra
autoconfiguration crud, but XP didn't talk IPv6 anyway.

The bigger problem, though, is that short of a strict host firewall it could
still be compromised by anything else on your network. Excluding unpatched
systems, the biggest risk IMO would be IoT devices, such as cameras.
Frankly, unless there's something specific you need XP for, junk it and
replace it with either a tablet/chromebook or even a cheap low-end Windows
laptop.

-----Original Message-----
From: Hardware [mailto:hardware-boun...@lists.hardwaregroup.com] On Behalf
Of Winterlight
Sent: Monday, August 27, 2018 6:47 PM
To: hardw...@lists.hardwaregroup.com
Subject: Re: [H] LAN but no internet


yeah... that's the problem. It might work. Even if I can't go to an ip
address with the browser can I be sure there isn't another way in hmmmmm
thanks

At 05:25 PM 8/27/2018, you wrote:
>If you don't specify a gateway and use direct IP (not workstation name) 
>connections it might work.
>
>lopaka
>
>On Mon, Aug 27, 2018 at 4:08 PM Winterlight 
><winterli...@winterlight.org>
>wrote:
>
> > I have a old XP PRO laptop. I want to use it on my LAN but for 
> > security reasons do not want it connected to the internet. So how do 
> > I disable the LAN connection without interfering with the LAN 
> > connection? Thanks
> >
> >



Reply via email to