Hi all
Moving house shortly which means, for the first time, I have to have my
father in law on my network. Now while he's no hacker, he is fond of
fiddling and has managed to crash his (Windows) machine so badly over the
years that nothing short of a full reinstall has fixed it. His
Hi Rob,
On Sat, May 07, 2011 at 09:49:29AM +0100, Rob Malpass wrote:
What I want is to keep him isolated so he can't even see any network
devices, printers - just let him share the connection.
More info needed.
How will his computer(s) connect to your LAN? Direct connection to a
switch? WiFi?
What I want is to keep him isolated
That's always a good plan with relatives :-)
Do you have a server running? That makes life very easy.
Add a second network card to it. This will form your untrusted network.
Set your machine to forward IP packets between interfaces (echo 1
On 07/05/2011 09:59, Vic wrote:
What I want is to keep him isolated
That's always a good plan with relatives :-)
Do you have a server running? That makes life very easy.
If you want WiFi on that network, set up another WiFi router and connect
one of its LAN ports to you untrusted
If you have a relatively powerful spare PC, use pfSense. This has AV proxy,
Snort w/ ET THREATS standard rules (VPS if you pay snort for them). It also
supports a wealth of other things not found in SOHO routers, or router
distros.
You can easily firewall, segregate, bridge or whatever into
On Saturday 07 May 2011 12:41:55 Ian Grody wrote:
If you have a relatively powerful spare PC, use pfSense.
By this, I use a P3 533MHz w/ runs snort and av proxy fine. This box handles 34
users at any one time too! :-)
This has AV proxy,
Snort w/ ET THREATS standard rules (VPS if you pay