egd wrote: > JJZolx;192940 Wrote: > >> By "not exposed", can we assume you mean that the .168.x network has no >> means of contacting the outside world? >> > Yes, albeit I presume if a connected Internet facing device is > compromised it can in turn be used to attempt compromise of devices on > the .168.x network. > > JJZolx Wrote: > >> So your SB3s can't use Squeezenetwork, for instance? Why is that >> desirable? >> > At present I've no use for Squeezenetwork. At this time none of the > radio stations I'd like to listen to work correctly with Squeezenetwork > or connecting directly from the SB3. > > JJZolx Wrote: > >> What you need to worry about is the outside world contacting your >> internal machines, which is usually protected against by your >> router/firewall by default. >> > Agreed, but I still feel better knowing my music and family video and > picture libraries aren't Internet facing. > > JJZolx Wrote: > >> This setup seems overly complicated. I don't see the need for two >> subnets and two NICs in the PCs. >> > Both PCs came with two on-board NICs. I trust the question of two > subnets is explained above? > > > > JJZolx Wrote: > >> Why two wireless access points? The SB3s do 802.11g, so they shouldn't >> negatively affect throughput of the wireless network, and the 54GB+/- >> will likely be much faster than your Internet connection, so all of the >> devices maxed out simultaneously shouldn't be starved for bandwidth. >> > Agreed, however, so long as I want to keep the two subnets apart I'm > guessing there is no other way? >
Your main security risk, as I see it, is that one of your PC's (laptop) becomes infected by a Trojan. If that happens, both subnets are exposed anyway. Your router/firewall is highly unlikely to be compromised itself unless you've misconfigured it. PC's exp. when running Internet Explorer or even any other browser or mail client are the modern hacker's favorite attack target. That and your own lack of network understanding. It's probably impossible for a non expert to build a really secure network with different subnets, waps and firewalls. And really, no attacker is going to be interested in your family's videos or pictures (you have backupped them on DVD?) unless you're some kind of royal. In that case you should have staff to handle this kind of thing ;) Regards, Peter _______________________________________________ discuss mailing list discuss@lists.slimdevices.com http://lists.slimdevices.com/lists/listinfo/discuss
