I have just installed IIS on my XP machine as I need it to test aspx pages I am making in my university course. I do not need these pages available over the internet, however I do on the LAN (so I can properly test it on other machines rather than having to use the http://localhost address on my own machine). I can access my server and my pages from other machines on the LAN by simply entering my LAN IP address, which is how I would like it to work. I do not want my server available to the internet, only to the LAN, so is having a router connecting the LAN to the internet enough to stop anyone accessing it? I am aware that you need to set up port forwarding if you want it to be accessible, but could a hacker still get through this given the external and internal IP's? Basically, do I need to change any settings on the IIS setup to prevent outside access, or is the router enough? Thanks

If your internal LAN is connected to the Internet via a SOHO NAT router, then you will be fine as long as you are not forwarding Port 80 (or whatever port your web server is running) to the internal IP address of your server.

It is a SOHO NAT router, and port 80 is not forwarded (that is the port the server is running on). Thanks for that info, puts my mind at rest that noone can get in to my pc lol. Cheers