I do know both sets of addresses.
I will assign a static IP to a wireless client in the lan side subnet and
see if I can get throught eh Linksys router. from the wireless side.
Thanks

-----Original Message-----
From: John Landahl [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, June 26, 2002 1:13 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: Re: [BAWUG] How to ? Will this work


On Tuesday 25 June 2002 05:03 pm, Enrique LaRoche wrote:
>
> DSL (PPOE) <-Linksysrouter (192.168.123.230) <-Switch 8-port<linkysrouterB
> (192.168.1.254)<-linksys WAP-11 Wireles clients
> All the other lan clients are connected to the 8 port switch.
>
> Whadya think. Can the wireless clients access the wired lan? Via TCP-IP
> Looks to me like its fairly secure.

I'm no routing or network security expert, but this doesn't look secure to
me.
With the wireless Linksys hooked directly to the same switch and no firewall
blocking the way, theoretically a wireless client could guess the IP subnet
of the wired clients (wouldn't be hard), add a static route to their machine
and voila -- access to your internal network.

You'd be much safer with a router/firewall in front of your LAN, preferrably
putting the wireless subnet in a DMZ.  The easiest way to do this is to get
an old 486/Pentium with two (or preferrably three) NICs and use FreeSCO
(http://www.freesco.org/) or LEAF/Bering (http://leaf.sourceforge.net/).

- John

--
general wireless list, a bawug thing <http://www.bawug.org/>
[un]subscribe: http://lists.bawug.org/mailman/listinfo/wireless

Reply via email to