need ideas on configuring a secure subnet

[dxpaap]

I just got high speed internet (cable). currently have four Win2K PC networked (peer to peer) in the house. I'm concerned about personal information on one of my systems.

Just got (not installed) a netgear router / firewall.

Computers1 has very sensitive information (thought of just making it standalone - but it needs internet access to banks, etc)

Computers2&3 are used for gamining (along with #1 above) so they need to talk to each other.

Computer4 I would like to turn into a music down loading/sharing system (not have any sensitive data). Because the music sharing programs open up the system for easy hacking - I'm concerned about having it on the same subnet as computer1.

Could I put Computer4 after the cable modem but before the router (guess I'd have to use a spliter to get a cable to computer4 and the cable modem) Wondering if that would cause some sort of problem having two devices using the same Cable Company IP address ?

Then have computer1,2,3 -behind the router firewall (protected from the network and computer4).

Or would I have to create 2 subnets (w/ 2 routers) to effectively seporate them ?

any suggestions or pointers to URLs appreciated.

thanks

dave

 

[QmarGustav]

Personally, I would just create one network... Unless of course you are sharing the computers with other people... In that case, 2 networks. At my house, my machine with quicken on it is not even networked. No network means no viruses, no hacking, no problems.

 

[gunrunnerjohn]

I've been experimenting with cascading routers to solve such a problem. If you connect the WAN port of a broadband router to the LAN port of another router, you have a hardware firewall between you and the rest of the network, and you still have access to the Internet. I was somewhat surprised that it worked as well as it did. That, combined with a software firewall to monitor outgoing access should be pretty secure.

Truthfully, I just run a software firewall on several of my systems behind the broadband router, and I'm not concerned about security.

 

[RhythmAddict]

Originally posted by: QmarGustav
Personally, I would just create one network... Unless of course you are sharing the computers with other people... In that case, 2 networks. At my house, my machine with quicken on it is not even networked. No network means no viruses, no hacking, no problems.

The only "Safe" computer is one that isn't online (aside from the entire physical security aspect)