Need to share ADSL with extra PC that can't see existing network.

[Fat Tone]

Ok. So all I've proved is that this filtering could be used if the device were placed as you suggested for 'router2', but the Draytek is overkill as it includes an adsl modem. I should have read more closely - I just saw the screen shot showing a box for the desination IP and got excited

I'll take a close look at the D-Link next.

Cheers

T.

[Helevitia]

Basic question, why don't you want PC6 to see anyone else?

Dave

[Fat Tone]

PCs1-5 are for a business that is in a part of the family home. PC6 belongs to the son. There is extreme paranoia about virii and security etc.

The Di-804V has LAN filters settings which block a range of ports and IPS from accessing the WAN, so that is not suitable. It also has WAN filter settings, which allows access from a range of IPs to access certain ports. I think I need something with better filtering.

T.

[Taz]

In the context of the diagram I posted the WAN side would be the other LAN so it's effectively filtering from one LAN to the other.

[Taz]

I've been thinking you may not need to setup filters to achieve what you want. If the 5 PC's are setup to use NetBUI rather than TCP/IP for Microsoft networking then PC6 would not be able to see them as NetBUI is a non routable protocol. You would still need the router between the two networks but a PC with two NIC's could be used in place of an actual router.

[Kurt]

Originally posted by Tony Andrews
I'm following these discussions with great interest and researching myself.
It certainly seems that going for a PC with 3 nics and appropriate s/w (e.g. Smoothwall) would do the trick, but seems a little overkill.
I did a Google for 'Router +"Access List" -Cisco' and got very little apart from training courses etc.
Taking a closer look at the manuals for the Draytek (available at the link I gave), there is a .pdf in the .zip called IPFILTER.PDF. It looks to me like a bunch of filters could do it.

Any opinions on that please?

TIA

T.

How about:

Internet--ADSL Gateway/Router--Router2--Switch--LAN
___________________________--Router3--PC6


You can find some very cheap Linksys or D-Link models that will do the trick (i.e. less that €60-70). Payback time will be short as well.

[arbymo]

Originally posted by Taz
Er, wrong

Taz : what exactly is wrong?

[Paddy]

Sorry that I wasn't much help then T

[Fat Tone]

Don't be soft, Paddy. You (and your daddy) and Dan were a great help, I'm just keen to explore all alternatives.

[Taz]

Originally posted by arbymo
Taz : what exactly is wrong?

Two PC's in different workgroups will still be able to see each other via Network Neighbourhood/My Network Places.

[Fat Tone]

Netgear DG824M

New Product - NetGear DG824M - ADSL modem, switch , wireless, firewall etc.

Does anyone know anything about this? It claims to include a switch which might do the trick. No manual available online as yet.

TIA

T.

[arbymo]

Originally posted by Taz
Two PC's in different workgroups will still be able to see each other via Network Neighbourhood/My Network Places.

Ok, thanks for the clarification.

[Marshmallowman]

Switch/hub are designed so they can be on the same network. a router will allow you to separate the networks.

My prefered (cheap solution) A dedicated linux box running a multnetwork firewall solution between an ADSL modem and the switch/s

Pure hardware

ADSL modem to a switch/ hub, 2 routers/firewalls connected to the hub/switch thus you have to networks...your ISP must allow you to have two IP's (some don't )

[Liquid Snake]

If you're thinking about the VLAN thing that Helevitia mentioned, probably not. I don't think low-end switches support VLANs.

[Drizzt]

I still think that using a simple LAN card would be the easiest solution...