Thread: Network insecure from guests

Hi all,
I want to secure my SOHO network from GUEST
:huh::huh::huh::huh:
Can anybody help me out regarding this..
we, in our office using 3 PC's using Data one's B/B modem ZXDSL 531B and enabled the Guest access from wireless option also (as i hv provided SSID for main Admin account)..
Now if any guests cum access the internet n want to try to wirelessly connect the modem it asked for security code(SSID) hence they have to connect through GUEST option. They can now connect to internet but they can also peep into our network(which) as they know that before connecting they have to set the IP of their laptop in 192.168.1.x series ..
So, plz. do guide me to secure our internal SOHO network from those..

configure settings & enable WEP.then you will enter a key(password).after this restart modem & then anyone who want to connect to your wifi will have to enter this key.

Whitestar, I am not asking about wireless security (dat i hv already provided, clients/guests hv to login to guest account only to access the internet).. Plz. do read the Thread carefully.. i want to allow our clients/guests to access the internet but they shud not b able to access our internal network (means our PC's data) b'coz we have enabled sharing in all our PC's.. and all of us are connected to wired network..
Is there any other way which i can enabled sharing between our 3 PC's only n others can't connect to us without any passwor/key..
IF any, then plz. do help me out..
Thanks for ur effort..

Originally Posted by whitestar_999

configure settings & enable WEP.then you will enter a key(password).after this restart modem & then anyone who want to connect to your wifi will have to enter this key.

install a firewall on each of the 3 computers & then configure it to block any new computer on your SOHO network from connecting to these 3 computers.

You can install a Windows 2003 server and create a new domain for your SOHO network. Keep your guest computers outside the domain.

This seems pretty better, can it be done through COMODO firewall..(It also means i hv to install it on all the three comp.)
If yes, then how to configure so as to allow three of our computers in network and disallow others..plz. explain..
thanks

Originally Posted by whitestar_999

install a firewall on each of the 3 computers & then configure it to block any new computer on your SOHO network from connecting to these 3 computers.

Well, i am already using XP pro on all the three computers.. It dat can be done on xp then plz. do explain me in detail how to create domain and give rights to PC's in our network and restrict others..
Thanks for replying..

Originally Posted by just4kix

You can install a Windows 2003 server and create a new domain for your SOHO network. Keep your guest computers outside the domain.

Originally Posted by anish_annu

Well, i am already using XP pro on all the three computers.. It dat can be done on xp then plz. do explain me in detail how to create domain and give rights to PC's in our network and restrict others..
Thanks for replying..

XP Pro is workstation OS. I was suggesting installing a central server with Windows 2003 Server as the OS. All the other workstations (running XP Pro) can connect to the server. You server will have a domain and DHCP and the server will be connected to the router. This is a little more complex solution and that is the way it works in bigger offices.

If you do not have the expertise or time or manpower (a Windows/NT expert), then I will not advise you this solution.

if all you want to do is protect your shared files.. why not just password protect the shared folders and files!!!

when you install any firewall it ask you to select the network on which computers are present to be classified as"trusted","internet" etc.in "trusted network"file & printer sharing is allowed.these firewalls also can be set to define some rules based on IP addresses.if the 3 computers have static internal IP address you can define a rule which will block incoming connection from any computer besides the other 2 computers.

Thanks a lot..
I will try this..can u suggest any gud firewall which mst be user frendly..will COMODO firewall work..
thanks

Originally Posted by whitestar_999

when you install any firewall it ask you to select the network on which computers are present to be classified as"trusted","internet" etc.in "trusted network"file & printer sharing is allowed.these firewalls also can be set to define some rules based on IP addresses.if the 3 computers have static internal IP address you can define a rule which will block incoming connection from any computer besides the other 2 computers.

How to do that, so that oder users on the network which i want to allow can also access them by providing that password and not the one's which i dont want to access..plz. guide me..
are u talking about any third party utility or simply by using only XP

Originally Posted by superprash2003

if all you want to do is protect your shared files.. why not just password protect the shared folders and files!!!

using windows xp...go to windows explorer..click on tools->folder options.
go to the view tab.. and uncheck "USE SIMPLE FILE SHARING "..uncheck it.. then right click on the folder you want to share and choose a name for it and you can choose which use can access it.. by adding the user.. the username and password for access depends whether the user is present in the local computer.. so if you want to add a username and password.. just create a new user in windows xp(through control panel) and add that user to the shared folder..
you have various options like read only,read and write etc etc

Well, i need to provide access to shared folders to few users on LAN and not to others/guests..
Then how can i create user on single computer..
Did u mean that i hv to create user name and password in comp. A which comp. B and C has and vice-versa with all probablities.. so that every computer has 3 user ID's with same passwords which need to share those files/folders, and only those have to be given permissions..
or something else u wanna say..
Plz. do elaborate it by clarifying..
thanks for prompt response..

Originally Posted by superprash2003

using windows xp...go to windows explorer..click on tools->folder options.
go to the view tab.. and uncheck "USE SIMPLE FILE SHARING "..uncheck it.. then right click on the folder you want to share and choose a name for it and you can choose which use can access it.. by adding the user.. the username and password for access depends whether the user is present in the local computer.. so if you want to add a username and password.. just create a new user in windows xp(through control panel) and add that user to the shared folder..
you have various options like read only,read and write etc etc

A newbie here,but is it really possible to trasnsform a wireless router as a network hub.Can anyone clarify how it is possible to snoop into a network thru a router with the visibility of a network tree?

@nagan .. yes you can transform disable wireless and dhcp.. you got yourself a hub

@anish_annu you just need to create the users in the comp where you are sharing the files..suppose you want to share a folder called fold1 on computer A to other comps... and you want users user1 and user2 to access.. then you need to create 2 new users in computer A called user1 and user2... and accordingly set the permissions.. then when you access the folder in computer A from some other computer.. it will ask for username and password.. then just enter user1 or user2 as username and its respective password!!

Originally Posted by superprash2003

@nagan .. yes you can transform disable wireless and dhcp.. you got yourself a hub

@anish_annu you just need to create the users in the comp where you are sharing the files..suppose you want to share a folder called fold1 on computer A to other comps... and you want users user1 and user2 to access.. then you need to create 2 new users in computer A called user1 and user2... and accordingly set the permissions.. then when you access the folder in computer A from some other computer.. it will ask for username and password.. then just enter user1 or user2 as username and its respective password!!

Once again for more clarity.Your answer seems not clear to me.If I put DHCP off
no other computers will be assigned an IP ,this is akin to a single user.My question was how can a wireless router also act as a hub?Do you mean to say that a person connects thru wireless his computer name will be visible in the network tree??annu says 192.168.1.1 will allow to snoop.This is just a gateway to connect to the network right??

a hub doesnt have DHCP functionality.. so thats why i said put off.. a hub is like an extension board(electrical)... its a dummy.. thats why i said turn off all those features...yes it is a gateway but since its a router it has functionality!!

Originally Posted by superprash2003

a hub doesnt have DHCP functionality.. so thats why i said put off.. a hub is like an extension board(electrical)... its a dummy.. thats why i said turn off all those features...yes it is a gateway but since its a router it has functionality!!

So it is really possible even thru a router to get into another network??