Blocking user sharing router

[Jason]

I am trying to figure out how to handle blocking a user
from haviong access to my computer while using the same
router for cable modem access. I have a home wiht an
apoartment downstairs and my wife and I each have our own
computers. I am trying to have all three computers have
internet access and my wife and i to share
printers/scanners but make sure that hte tenent only has
internet access and connot get into out computers. Can
someone please help.

 

[yellowpike]

Hi Jason
I think your best bet is to be sure you have all your shared resources
protected by a strong password (at least).
See this link
http://www.practicallynetworked.com/sharing/xp/filesharing.htm
There are other (and better) methods available, depending on whether or not
you are using NTFS. See this link
http://support.microsoft.com/default.aspx?scid=kb;en-us;q308418
But to get a feel for this stuff, open your "Help and Support" and click the
link "Security and Privacy".
That should give you a good start on making some decisions.
Your router may have some filtering capabilities that will give you some
control over "connection" access but really won't help with the "network"
access issue.
Hope this helps a bit....
* And don't forget a firewall (like ZoneAlarm freeware) even with the
router.
http://www.zonelabs.com/store/content/catalog/products/zonealarm/znalm_details.jsp
Happy Independence Day!
yellowpike

 

[allan grossman [ms-mvp]]

Hi, Jason -

Anytime you have someone connected to your physical
network you have a bit of a security risk but here's how
I'd do it. Other people would probably do it
differently - I'm gonna be interested in what other
opinions come up

1. Assign static IPs somewhere on the 10.x.x.x network
for your machine and your wife's machine. Let's use
10.6.188.101 and 10.6.188.102 as an example.

Subnet mask would be 255.255.255.0
Default gateway address would be the address of the LAN
side of the router.
DNS server addresses would have to be set on the machines
but would be the same as they are now.

2. Make sure the workgroup name on your machines is not
MSHOME or WORKGROUP

3. Consider purchasing firewall software for your
machine and your wife's machine. The firewall built into
Windows XP probably isn't the best choice for folks with
a local network in addition to an Internet connection.

3. For your tenant, set the router to assign IP addresses
on a completely different network - let the router assign
addresses from say, 192.168.1.1 through 192.168.1.10 or
something - and don't give your tenant any more
information about your network than is absolutely
necessary. If your router will provide him with DNS
server addresses you don't need to tell him anything at
all - just tell him to set his machine to obtain an IP
address automatically.

This is an interesting question - like I said I'll be
interested in others' ideas.

Good luck with the new tenant

 

[yellowpike]

Hello Mr. G
Would the added "complexities" of such a setup outweigh the more
"simplistic" password approach?
How would one setup an additional network?
You're right, this is a fascinating question (especially for a hack like
myself).

respectfully
yellowpike
And a Happy Independence Day Sir!