Ideas for a complicated scenario

From: /\/\_YoYo_/\/\ (paul_dawson2003_at_hotmail.com)
Date: 02/24/04 

Date: 24 Feb 2004 10:02:43 -0800

Hello gents,

Here's the situation:

A hotel allows it's visitors to come and plug into the network via
ethernet or wireless methods. Only problem is that when some of these
guests come and place their worm/virus/trojan riddled machines, it
brings the network connectivity devices down.

The machines are completely seperated from one another via VLANS, so
basically each hotel room sits off of a VLAN which then goes into the
firewall. The firewall allows anything out and nothing in - cant
restrict the hotel guests!!

Now, how do we prevent someone from plugging a machine in that is
infected with the blaster worm (without having to block TCP 135 / 445)
or a virus from plugging into the network ??? I dont think it's
possible.

So basically this hotel is a glorified DMZ. The only thing is there is
no management of the devices in the DMZ.

Any ideas??

Relevant Pages

  • Re: hotel nightmare part 2
    ... > the farthest end of the hotel to set up the wireless... ... > I just think its so unproffesional when a client connects to a network, ... I've never been in a public place with working WEP. ...
    (alt.internet.wireless)
  • Re: [Full-disclosure] Hotel Network Security: A Study of Computer Networks in U.S. Hotels
    ... I agree with you that if employees ... in place technologies *on* those networks that will help prevent the ... If a hotel is in a bad ... clear that they are NOT upholding this, and that the computer network is ...
    (Full-Disclosure)
  • Re: OT: getting on a wifi hotspot in a library
    ... Check if the location offers wired and or wireless connections and where ... Once your logged into the network though your free and ... using an open connection. ... there is nothing the hotel IT staff can ...
    (alt.sys.pc-clone.dell)
  • Re: False Client
    ... Virtual Private Network client ... In the msInternet Explorer address bar type the location of the hotel welcome page, something similar to "http://192.168.2.1"; or whatever the hotel welcome page is. ... If everybody else is using the hotel network but you, ... Ethernet cable on your desk before starting up/turning on your laptop. ...
    (rec.arts.disney.parks)
  • Re: Problems with logging into public WiFi
    ... Hotel staff is never is of any help. ... Reboot your laptop. ... Try to determine if they're doing their own wi-fi access or going ... some network at 192.168.1.xxx, and proclaim it be untrustworthy, every ...
    (alt.internet.wireless)
Quantcast