Re: How2 allow a local computer to access Internet, but not other locals - LAN/network/firewall config?

From: Igor (Igor9273@sprynet.com)
Date: 04/09/02 

From: Igor <Igor9273@sprynet.com>
Date: Tue, 09 Apr 2002 00:39:00 -0400

On Tue, 09 Apr 2002 04:47:41 +0200, Wolfgang Kueter <wolfgang@shconnect.de> wrote:

>Igor wrote:
>
>> [...]
>> I would like to avoid having to reconfigure the system from P2P to a
>> server-authentication system.
>
>It doesn't matter what you like and what you don't like. You need some
>authority in you windows network (read Domain controller) and you
>simply don't have that in a P2P network. Get a server and set up a
>domain controller.
>
Yes, It doesn't matter what I like and don't like -- in your world. Does it matter what
you like or don't like? I was stating my preference, but obviously open to other
suggestions. As in, "I would like to avoid ..." Do you offer a style manual for the way
questions should be posted here -- Wolfgang's Way? Anyway, thanks for your suggestion.

>> I would be willing to buy some software or another moderately-priced
>> piece of hardware if that will do the trick.
>
>Read: I'm willing to invest in more playground stuff that doesn't solve
>my problem but I'm unwilling to realize that I need to implement
>central users rights administration.

Again, my preferences.
>
>> Also, I will be adding a small server soon (no real
>> transactions, just browsing and some db recording) and am very
>> concerned about security of files not on the server -- e.g., if
>> someone hacked the UNIX/Apache server they could then use it to hack
>> other PCs on the LAN.
>
>Why should someone hack your PC's from a Unix box? The Unix box is
>probably the more interesting machine.

Well, you don't know what's on my PC, do you? And, with some good work at this end, you
never will.
>
>> As may be apparent from the above, I am only a novice on security.
>
>Then get professional help. Ask a consultant to take a look at your
>network.

Fine, there is a suggestion rather than a discharge.
>
>> So, maybe now is the time to get a firewall box, if necessary.
>
>Maybe, maybe not? Who knows? I don't, cause I don't know your
>environment and your needs of communication.
>
Well, if there is not enough info based on my post, ask. I provided a lot, I thought. If
not enough for you, sorry. Others seemed to have suggestions.

> In anay event, any proposed solutions are welcome.
>
>Get professional help. Ask someone who knows what he's doing to look at
>your network.

Are you saying that Ric Griffy's suggestion in this thread -- two routers -- would not
work?

Thanks.

Relevant Pages