Secure Network?

[Xion]

I have to setup a small network with 4 Windows PCs always on the network, and allow for up to 6 laptops to plugin to the network. I have 10 static IPs available. I need file and printer sharing, but I have heard tons of security related problems with shared resources. Right now, all the PC's and laptops have static IPs assigned, and everything works ok. My question is, if I reconfigure the network so that a linux box with two NICs (one public IP and one private IP) acts as the gateway to the network, and the windows machines use private IPs, does that eliminate the threat of intrusion to the windows machines? Any tips appreciated.

 

[igiveup]

Eliminate? NO. The best you can do is hope to make it a pain for anybody wanting to break into your network. However, having the Linux box acting as a firewall will bring the security up to the Linux level from your windows computer level.

 

[Garion]

Actually, I'd skip the linux box route - It's overly complicated and takes a lot of time to setup. I'd consider a hardware router. If you've got security concerns, they fit the bill. They are not perfect, but are going to protect your network as well as anything save a full firewall.

If you can get the cash (About $300), Watchguard makes a nice little box (Watchguard SOHO) that has some security features (such as a built-in firewall and web content filter) that a lot of the lower-cost ones don't have. I've got one at home and really like it. Nice thing is that it's a plug-and-forget solution - Never needs to be rebooted, has no moving part to fail and has all the features you'd want.

- G