Fully block internet access

[Sumotku]

I have a workstation that hasn't seen the internet since XP was installed and updated, and a laptop which is always online. I'd like to access files on either computer from the other without exposing the workstation for a millisecond. I can hardwire the workstation to the router, but can I have my intranet with no internet? I've gotten used to USB drives for moving files, but that's getting old. Is there a 100% secure solution?

 

[cprince]

Windows XP is not that old. A lot of people still uses it--including myself. Just update it to the latest patches. If you are still paranoid, most router can block specific intranet IP addresses. Just assign the workstation a static IP address and block that IP in the router.

 

[drebo]

Connect the Desktop computer to the router and manually configure the IP address, excluding a default gateway. That'll make it unable to access the internet, though it will still be accessible to hosts on the same subnet.

 

[Sumotku]

Is it a safe assumption to say that the acid test for this would be to verify zero packets sent/received after configuring (without file transfers running of course).

 

[Fardringle]

Not really. Networked devices are often very "chatty", sending packets back and forth even when no active file/data transfers are being processed.

The acid test for me would be to confirm you can still transfer files between computers, then confirm you cannot access a web page after configuring the PC to have no default gateway.

 

[Slowlearner]

Control Panel>Network Connections>scroll down to Local Area Connection> right click and scroll down to Properties> Scroll down to Internet Protocol> Click on Properties>Advanced tab>Options>TCP/IP Filtering>Filtering>Enable TCP/IP filtering>Permit only some bogus port say 2000 (specifically do not include port 80 (thats the one for web browsing)).

You may also do the same thing from the router, by blocking traffic over port 80 and others for ftp/email/etc (google for relevant ports) for this particular pc.

 

[Sumotku]

Wouldn't opening a port leave an open port for a scanner to reveal?

 

[JackMDS]

Install NetBEUI on both computers.

Bind it to File sharing and umbind TCP/IP from File Sharing.

http://www.ezlan.net/netbeui.html

 

[Sumotku]

NetBEUI it is. Thanks so much.