Blocking access between computers

Londo Molari · 02-23-2006, 10:26 AM

Hi

I have 3 routers set up in the following configuration:

The routers are not being used as simple HUBS. Each router is using its own DHCP to create its own network.

Now everyone is on the internet, nice and dady

Everyone can do simple file sharing WITHIN their own network

However, if the computers under Network B or C type \\192.168.0.1\Shared\ They can access shared folders from Network A.

Also, computers in Network A canNOT do the same to network B or C!

I want the access restrictions to be the exact opposite. Computers on Network A should be able to access whatever they like, but more importantly computers on Networks B and C should NOT be able to access the shared files on Network A at ALL!

I do not want to mess with permissions because many of the computers have XP HOME. So is there anyway I can do this via firewalls? Although I have used router firmware before, I have never messed with firewalls.

Thank you very much in advance.

**johnwill** · 02-23-2006, 04:04 PM

You are looking to exceed the capability of simple SOHO routers. If you'd settle for combining networks B & C and keeping A separate, you can do it with two routers.

Connect the WAN port of Router B directly to the Internet connection. Connect the WAN port of router A to one of the LAN ports on router B. Connect all of the machines on router B and router C to router B.

Router A will now isolate the machines on it from access by the machines on router B.

Londo Molari · 02-23-2006, 04:22 PM

Yes its acceptable to me to combine Networks B and C. I'll jut not use router C's WAN port and use it as a simple hub.

Ah so I see, I have to invert the sequence of routers. And this will work without messing with firewalls? SWEET!

Thank you!

**johnwill** · 02-24-2006, 08:42 AM

Glad we could help you out.

You even end up with a spare router.

02-23-2006, 10:26 AM	#1 (permalink)
Londo Molari Registered User Join Date: Dec 2005 Location: Canada Posts: 17 OS: WinXP	Blocking access between computers Hi I have 3 routers set up in the following configuration: The routers are not being used as simple HUBS. Each router is using its own DHCP to create its own network. Now everyone is on the internet, nice and dady Everyone can do simple file sharing WITHIN their own network However, if the computers under Network B or C type \\192.168.0.1\Shared\ They can access shared folders from Network A. Also, computers in Network A canNOT do the same to network B or C! I want the access restrictions to be the exact opposite. Computers on Network A should be able to access whatever they like, but more importantly computers on Networks B and C should NOT be able to access the shared files on Network A at ALL! I do not want to mess with permissions because many of the computers have XP HOME. So is there anyway I can do this via firewalls? Although I have used router firmware before, I have never messed with firewalls. Thank you very much in advance. __________________ "The purpose of all life... is to end" - Agent Smith

02-23-2006, 04:04 PM	#2 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,720 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	You are looking to exceed the capability of simple SOHO routers. If you'd settle for combining networks B & C and keeping A separate, you can do it with two routers. Connect the WAN port of Router B directly to the Internet connection. Connect the WAN port of router A to one of the LAN ports on router B. Connect all of the machines on router B and router C to router B. Router A will now isolate the machines on it from access by the machines on router B. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

02-23-2006, 04:22 PM	#3 (permalink)
Londo Molari Registered User Join Date: Dec 2005 Location: Canada Posts: 17 OS: WinXP	Yes its acceptable to me to combine Networks B and C. I'll jut not use router C's WAN port and use it as a simple hub. Ah so I see, I have to invert the sequence of routers. And this will work without messing with firewalls? SWEET! Thank you! __________________ "The purpose of all life... is to end" - Agent Smith

02-24-2006, 08:42 AM	#4 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,720 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	Glad we could help you out. You even end up with a spare router. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience