[SOLVED] Sharing Internet Connection

I have a neighbour who is here at weekends only and I am thinking of
offering her a piggy back on my Internet connection.

I have a Billion BiPac 7800(N) and I thought that WPS would give her a
connection independent of my network but it doesn't, I completely
misunderstood it.

If I just give her my WPA key and authorise her MAC address then it seems
to me she will get access to the Internet and my local network which would
not be sensible.
Is there a secure way to set up sharing?

Sorry to ask here but the UK Windows and Network groups seem moribund, I
did have to 'home build' the router to the extent of screwing the aerials
on!

--
Jeff Gaines Wiltshire UK
640k ought to be enough for anyone.
(Bill Gates, 1981)

In article <>, Jeff Gaines wrote:
> If I just give her my WPA key and authorise her MAC address then it
> seems to me she will get access ...

Yes. That will give her access to the wireless network, and so to any
network services that are public (i.e. not otherwise secured) within
that network.

Be aware that locking down the MAC addresses that can access your
network doesn't really buy you anything, as it's quite easy to
intercept network traffic to your router and discover what MAC
addresses it accepts. These are transmitted in clear, so anyone can see
them.

> Is there a secure way to set up sharing?

Yes.

You can't use the security of the wireless network to secure computers
within the network from one another, you have to use the security
provided by the OS(es) being used.

This can be pretty straightforward, depending on the OS(es) in
question. What I do (on Windows) is to create a user group called
"LAN_Users" and add all my local users to it. I also set up Windows
permissions on any shares so that only members of that group can access
the shares.

Anything that I want to allow visitors to access (such as a shared
printer) I give wider access to, of course.

As long as your visitor doesn't know the ID and password of any member
of the "LAN_Users" group (or of the "Administrators" group, which would
allow access to the default administrative shares) she shouldn't be
able to access any of your shared volumes.

Note that this is made much harder to manage by the "Simplified"
network sharing in "Home" versions of Windows, which is so dumbed down
that I can't work out how to set it up at all! Any sort of networking
more sophisticated than a simple default workgroup with unsecured
shared really needs a "Pro" version of Windows.

> Sorry to ask here but the UK Windows and Network groups seem moribund

You might have done better to post in uk.comp.home-networking, which is
alive though rather quiet. It's more on-topic there than here and you
will get some good advice there.

Newsgroups become livelier when people post there, but they become
moribund when people start avoiding them because they seem quiet.
Avoiding a group that seems quiet is a sure way to hasten its decline.

Cheers,
Daniel.

On 20/12/2011 in message <> Daniel James
wrote:

[snipped]

Many thanks Daniel :-)

I've kept that for future use.

--
Jeff Gaines Wiltshire UK
There are 10 types of people in the world, those who do binary and those
who don't.