issolate a pc on my LAN?

[ryko]

Hello Everyone,

I have a SMC 2804wbr barricade g wireless router and 4 pc's on my little LAN. 2 are hard-wired and 2 are wireless clients. All pc's are running winXP, the 2 wireless clients are using SMC PCMCIA and SMC PCI adapters in the G variant. I have set up a workgroup so that i can access files on any pc and i have internet access on all of the clients as well. Can i issolate one of my client pc's so that i can access/share local files but keep it from the internet?

Basically, i want to use my htpc as a file server, but keep it off the internet and away from problems like trojans/viruses,etc...Besides webpages look like crap on my 32" trinitron...

What do i need to do in the router's web config utility thing?

[Dexter]

If you have filters in the router's settings, you can restrict the IP address in question from using port 80, which is the main internet port. Depending on how your router works and how gung-ho you want to get, you can restrict all ports except 139 (Windows File and Printer Sharing) on that computer.

This assumes that you are using a static IP on that server.

Dexter...

[Straight_Man]

Well, most of the Barricades should let you map WAN ports closed. So, you let WAN ports stay open only for ports 80, 8080 and your email ports and manually open what you need to download to your server. When ports are blocked, no way they can get in. Port 21 is traditional FTP, you can block the P2P ports. OR, you firewall your server box, let the firewall software block for you. Sygate is decent this way.

John D.

[Park_7677]

Linksys Routers have a filtered section, where you can make IPs, Ports, and MACs private (LAN Access only). However, I can't find a feature like that looking over the SMC Manual. Maybe you could take a look in your browser configuration for something of the like.

I have an idea: Address Mapping. Supplying your WAN IP and mapping the range of LAN IPs allowed on the internet in one entry. Then, in the next, give a LAN IP as the Global IP (non-accessible outside LANs) and then supply the 1 IP Range of your Fileserver. The global IP in entry 2 and the range should be different! ex: Global: 192.168.1.250 | Range: 192.168.1.5 - 5. The router might not like this, but give it a try. Picture below.