want to bring an old windows 7 machine up for internal use only

ira.kopilow

Prominent
Nov 7, 2017
1
0
510
I want to add another nic to my main pc. i have a program that will only run on widows 7 and below. existing nic connects to the router and has internet access. 2nd nic will use a crossover cable to the win 7 machine. will that keep my main pc as safe as it is now, or will the win 7 machine make it more vulnerable?
 
Solution
So since you are not "bridging" the two nic connections together the win 7 machine will not have internet access.

However this in no way prevents an infection from using your PC as the middle man.

The much better option is to use firewall rules and then you can connect the windows 7 PC directly to the switch/router.
You need to find out the port numbers that the software on the windows 7 software is using. Then using either a third-party firewall or the iptables in your router (if it is a higher end router or has 3rd party firmware), you can then allow the specific traffic you want the win7 machine to get, and deny all other traffic with an implicit deny statement.

R_1

Expert
Ambassador
the program will not install and run under compatibility mode?
https://support.microsoft.com/en-us/help/15078/windows-make-older-programs-compatible

yes that will work. you will need to make the 7 machine and the 2nd nic on the same network, but different from the main network.
if main network has an IP range of 10.0.0.1-255. assign an different address block to the 7 and 2nd NIC. example 8.0.0.1-255. make sure you do not assign a default gateway on the 7 machine.
 
So since you are not "bridging" the two nic connections together the win 7 machine will not have internet access.

However this in no way prevents an infection from using your PC as the middle man.

The much better option is to use firewall rules and then you can connect the windows 7 PC directly to the switch/router.
You need to find out the port numbers that the software on the windows 7 software is using. Then using either a third-party firewall or the iptables in your router (if it is a higher end router or has 3rd party firmware), you can then allow the specific traffic you want the win7 machine to get, and deny all other traffic with an implicit deny statement.
 
Solution