India Broadband Forum


Network insecure from guests

This is a discussion on Network insecure from guests within the BSNL broadband forums, part of the Broadband Internet Service Providers category; Hi all, I want to secure my SOHO network from GUEST Can anybody help me out regarding this.. we, in ...

Go Back   India Broadband Forum > Indian Broadband Forums > Broadband Internet Service Providers > BSNL broadband

Network insecure from guests Network insecure from guests

India Broadband Forum

Register Blogs Members List Social Groups Search Today's Posts Mark Forums Read

BSNL broadband Bsnl broadband internet connection and modems, routers and other bsnl dataone related issues can be discussed here.

                      

Reply

 

LinkBack Thread Tools Display Modes
Old 03-08-08, 11:34 AM   #1
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Default Network insecure from guests
Hi all,
I want to secure my SOHO network from GUEST

Can anybody help me out regarding this..
we, in our office using 3 PC's using Data one's B/B modem ZXDSL 531B and enabled the Guest access from wireless option also (as i hv provided SSID for main Admin account)..
Now if any guests cum access the internet n want to try to wirelessly connect the modem it asked for security code(SSID) hence they have to connect through GUEST option. They can now connect to internet but they can also peep into our network(which) as they know that before connecting they have to set the IP of their laptop in 192.168.1.x series ..
So, plz. do guide me to secure our internal SOHO network from those..
anish_annu is offline   Reply With Quote
Old 03-08-08, 12:08 PM   #2
Platinum Member
 
whitestar_999's Avatar
 
Join Date: Jan 2008
Location: UP(west)
Posts: 1,971
Blog Entries: 1
Rep Power: 3
whitestar_999 will become famous soon enough
Default
configure settings & enable WEP.then you will enter a key(password).after this restart modem & then anyone who want to connect to your wifi will have to enter this key.
whitestar_999 is offline   Reply With Quote
Old 03-08-08, 12:21 PM   #3
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Post
Whitestar, I am not asking about wireless security (dat i hv already provided, clients/guests hv to login to guest account only to access the internet).. Plz. do read the Thread carefully.. i want to allow our clients/guests to access the internet but they shud not b able to access our internal network (means our PC's data) b'coz we have enabled sharing in all our PC's.. and all of us are connected to wired network..
Is there any other way which i can enabled sharing between our 3 PC's only n others can't connect to us without any passwor/key..
IF any, then plz. do help me out..
Thanks for ur effort..

Quote:
Originally Posted by whitestar_999 View Post
configure settings & enable WEP.then you will enter a key(password).after this restart modem & then anyone who want to connect to your wifi will have to enter this key.
Last edited by anish_annu; 03-08-08 at 12:24 PM. Reason: hav to add some lines for more clarification
anish_annu is offline   Reply With Quote
Old 03-08-08, 12:43 PM   #4
Platinum Member
 
whitestar_999's Avatar
 
Join Date: Jan 2008
Location: UP(west)
Posts: 1,971
Blog Entries: 1
Rep Power: 3
whitestar_999 will become famous soon enough
Default
install a firewall on each of the 3 computers & then configure it to block any new computer on your SOHO network from connecting to these 3 computers.
whitestar_999 is offline   Reply With Quote
Old 03-08-08, 01:47 PM   #5
Platinum Member
 
just4kix's Avatar
 
Join Date: Dec 2007
Location: Pune
Posts: 8,899
Blog Entries: 6
Rep Power: 19
just4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to behold
Default
You can install a Windows 2003 server and create a new domain for your SOHO network. Keep your guest computers outside the domain.
just4kix is offline   Reply With Quote
Old 03-10-08, 01:10 PM   #6
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Smile
This seems pretty better, can it be done through COMODO firewall..(It also means i hv to install it on all the three comp.)
If yes, then how to configure so as to allow three of our computers in network and disallow others..plz. explain..
thanks
Quote:
Originally Posted by whitestar_999 View Post
install a firewall on each of the 3 computers & then configure it to block any new computer on your SOHO network from connecting to these 3 computers.
anish_annu is offline   Reply With Quote
Old 03-10-08, 01:12 PM   #7
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Default Reply for domain
Well, i am already using XP pro on all the three computers.. It dat can be done on xp then plz. do explain me in detail how to create domain and give rights to PC's in our network and restrict others..
Thanks for replying..
Quote:
Originally Posted by just4kix View Post
You can install a Windows 2003 server and create a new domain for your SOHO network. Keep your guest computers outside the domain.
anish_annu is offline   Reply With Quote
Old 03-10-08, 01:22 PM   #8
Platinum Member
 
just4kix's Avatar
 
Join Date: Dec 2007
Location: Pune
Posts: 8,899
Blog Entries: 6
Rep Power: 19
just4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to beholdjust4kix is a splendid one to behold
Default
Quote:
Originally Posted by anish_annu View Post
Well, i am already using XP pro on all the three computers.. It dat can be done on xp then plz. do explain me in detail how to create domain and give rights to PC's in our network and restrict others..
Thanks for replying..
XP Pro is workstation OS. I was suggesting installing a central server with Windows 2003 Server as the OS. All the other workstations (running XP Pro) can connect to the server. You server will have a domain and DHCP and the server will be connected to the router. This is a little more complex solution and that is the way it works in bigger offices.

If you do not have the expertise or time or manpower (a Windows/NT expert), then I will not advise you this solution.
__________________
*** Never argue with an idiot ***


To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.
|
To view links or images in signatures your post count must be 10 or greater. You currently have 0 posts.

-------------------------------------------------------------------------------------------
just4kix is offline   Reply With Quote
Old 03-10-08, 04:54 PM   #9
Platinum Member
 
Join Date: Feb 2008
Posts: 2,692
Rep Power: 5
superprash2003 will become famous soon enoughsuperprash2003 will become famous soon enough
Default
if all you want to do is protect your shared files.. why not just password protect the shared folders and files!!!
superprash2003 is offline   Reply With Quote
Old 03-10-08, 05:11 PM   #10
Platinum Member
 
whitestar_999's Avatar
 
Join Date: Jan 2008
Location: UP(west)
Posts: 1,971
Blog Entries: 1
Rep Power: 3
whitestar_999 will become famous soon enough
Default
when you install any firewall it ask you to select the network on which computers are present to be classified as"trusted","internet" etc.in "trusted network"file & printer sharing is allowed.these firewalls also can be set to define some rules based on IP addresses.if the 3 computers have static internal IP address you can define a rule which will block incoming connection from any computer besides the other 2 computers.
whitestar_999 is offline   Reply With Quote
Old 03-11-08, 02:11 PM   #11
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Thumbs up
Thanks a lot..
I will try this..can u suggest any gud firewall which mst be user frendly..will COMODO firewall work..
thanks

Quote:
Originally Posted by whitestar_999 View Post
when you install any firewall it ask you to select the network on which computers are present to be classified as"trusted","internet" etc.in "trusted network"file & printer sharing is allowed.these firewalls also can be set to define some rules based on IP addresses.if the 3 computers have static internal IP address you can define a rule which will block incoming connection from any computer besides the other 2 computers.
anish_annu is offline   Reply With Quote
Old 03-11-08, 02:14 PM   #12
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Post
How to do that, so that oder users on the network which i want to allow can also access them by providing that password and not the one's which i dont want to access..plz. guide me..
are u talking about any third party utility or simply by using only XP

Quote:
Originally Posted by superprash2003 View Post
if all you want to do is protect your shared files.. why not just password protect the shared folders and files!!!
anish_annu is offline   Reply With Quote
Old 03-11-08, 02:27 PM   #13
Platinum Member
 
Join Date: Feb 2008
Posts: 2,692
Rep Power: 5
superprash2003 will become famous soon enoughsuperprash2003 will become famous soon enough
Default
using windows xp...go to windows explorer..click on tools->folder options.
go to the view tab.. and uncheck "USE SIMPLE FILE SHARING "..uncheck it.. then right click on the folder you want to share and choose a name for it and you can choose which use can access it.. by adding the user.. the username and password for access depends whether the user is present in the local computer.. so if you want to add a username and password.. just create a new user in windows xp(through control panel) and add that user to the shared folder..
you have various options like read only,read and write etc etc
superprash2003 is offline   Reply With Quote
Old 03-11-08, 04:37 PM   #14
Junior Member
 
Join Date: Mar 2008
Posts: 8
Rep Power: 2
anish_annu is on a distinguished road
Thumbs up
Well, i need to provide access to shared folders to few users on LAN and not to others/guests..
Then how can i create user on single computer..
Did u mean that i hv to create user name and password in comp. A which comp. B and C has and vice-versa with all probablities.. so that every computer has 3 user ID's with same passwords which need to share those files/folders, and only those have to be given permissions..
or something else u wanna say..
Plz. do elaborate it by clarifying..
thanks for prompt response..

Quote:
Originally Posted by superprash2003 View Post
using windows xp...go to windows explorer..click on tools->folder options.
go to the view tab.. and uncheck "USE SIMPLE FILE SHARING "..uncheck it.. then right click on the folder you want to share and choose a name for it and you can choose which use can access it.. by adding the user.. the username and password for access depends whether the user is present in the local computer.. so if you want to add a username and password.. just create a new user in windows xp(through control panel) and add that user to the shared folder..
you have various options like read only,read and write etc etc
anish_annu is offline   Reply With Quote
Old 03-11-08, 08:34 PM   #15
Junior Member
 
Join Date: Feb 2008
Age: 39
Posts: 33
Rep Power: 2
Nagan is on a distinguished road
Default
A newbie here,but is it really possible to trasnsform a wireless router as a network hub.Can anyone clarify how it is possible to snoop into a network thru a router with the visibility of a network tree?
Nagan is offline   Reply With Quote
Old 03-11-08, 09:31 PM   #16
Platinum Member
 
Join Date: Feb 2008
Posts: 2,692
Rep Power: 5
superprash2003 will become famous soon enoughsuperprash2003 will become famous soon enough
Default
@nagan .. yes you can transform disable wireless and dhcp.. you got yourself a hub

@anish_annu you just need to create the users in the comp where you are sharing the files..suppose you want to share a folder called fold1 on computer A to other comps... and you want users user1 and user2 to access.. then you need to create 2 new users in computer A called user1 and user2... and accordingly set the permissions.. then when you access the folder in computer A from some other computer.. it will ask for username and password.. then just enter user1 or user2 as username and its respective password!!
superprash2003 is offline   Reply With Quote
Old 03-11-08, 09:54 PM   #17
Junior Member
 
Join Date: Feb 2008
Age: 39
Posts: 33
Rep Power: 2
Nagan is on a distinguished road
Default
Quote:
Originally Posted by superprash2003 View Post
@nagan .. yes you can transform disable wireless and dhcp.. you got yourself a hub

@anish_annu you just need to create the users in the comp where you are sharing the files..suppose you want to share a folder called fold1 on computer A to other comps... and you want users user1 and user2 to access.. then you need to create 2 new users in computer A called user1 and user2... and accordingly set the permissions.. then when you access the folder in computer A from some other computer.. it will ask for username and password.. then just enter user1 or user2 as username and its respective password!!
Once again for more clarity.Your answer seems not clear to me.If I put DHCP off
no other computers will be assigned an IP ,this is akin to a single user.My question was how can a wireless router also act as a hub?Do you mean to say that a person connects thru wireless his computer name will be visible in the network tree??annu says 192.168.1.1 will allow to snoop.This is just a gateway to connect to the network right??
Nagan is offline   Reply With Quote
Old 03-11-08, 10:08 PM   #18
Platinum Member
 
Join Date: Feb 2008
Posts: 2,692
Rep Power: 5
superprash2003 will become famous soon enoughsuperprash2003 will become famous soon enough
Default
a hub doesnt have DHCP functionality.. so thats why i said put off.. a hub is like an extension board(electrical)... its a dummy.. thats why i said turn off all those features...yes it is a gateway but since its a router it has functionality!!
superprash2003 is offline   Reply With Quote
Old 03-11-08, 10:14 PM   #19
Junior Member
 
Join Date: Feb 2008
Age: 39
Posts: 33
Rep Power: 2
Nagan is on a distinguished road
Default
Quote:
Originally Posted by superprash2003 View Post
a hub doesnt have DHCP functionality.. so thats why i said put off.. a hub is like an extension board(electrical)... its a dummy.. thats why i said turn off all those features...yes it is a gateway but since its a router it has functionality!!
So it is really possible even thru a router to get into another network??
Nagan is offline   Reply With Quote
Reply

Tags
guests, insecure, network

« Configure dataone on Windows 2000 SP4 | IP not assigned to my computer »
Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may post new threads
You may post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On

Similar Threads

Thread Thread Starter Forum Replies Last Post
Making the BSNL DataOne Wireless home network guide Admin BSNL broadband 203 11-20-09 10:00 PM
Wireless Security Primer just4kix Broadband How to 27 07-25-09 05:05 PM
Infotecs Advances ViPNet Virtual Private Network With New Security And Communication India Broadband PR Releases Database 0 07-17-06 02:09 AM
Japan might force NTT to share its new network with competitors Admin News from the Tech and IT World 0 07-16-06 12:45 AM
Nokia wins a big China Mobile network deal India Broadband Internet India Broadband and Telecom News 0 07-15-06 03:42 PM


All times are GMT +5.5. The time now is 07:51 PM.

Contact Us - India Broadband Forum - Archive - Privacy Statement - Top

India Broadband Forum