MSGID: 1:229/426 10863C83
REPLY: 2:221/1.58@fidonet e2496fe0
TZUTC: -0500
On 10 Mar 20  19:55:00, August Abolins said the following to Nick Andre:

AA> I want my wired pcs connected/accessible to each other, but ofcourse I do  
AA> not want the network to be exposed to wireless devices.  Hence the WTF  
AA> when I just happened to connect a recent new laptop (the Thinkpad 540p  
AA> that I mentioned in another echo a couple months ago) to finish some Win7  
AA> updates.

Here at home, I use the principal of least-privilege... my "Nick" account does
not have administrator privilege. File shares on the Lan are locked down to 
only what I need to access. That means no root or system directory exposure.

We're talking about a home network with a busy server system, several
virtual machines, the BBS / Fido hub, a couple entertainment PC's and one in 
the kitchen, a couple laptops, printers, Apple phones, tablets and Amazon 
Echo devices.

What you were describing implies that there is no authentication between the
systems on your LAN if you were able to see everything in the scenario you
originally stated. If these are Windows computers, I am curious how that is
possible unless you have specifically enabled "Everyone" permissions or have
credentials cached.

If you absolutely 100% do not want the wireless devices to see anything on 
your LAN then they should be isolated into the Guest network or on a 
seperate router altogether.

I'd dump that ISP-issued router if possible, and get a commercial-grade router
if there is budget for one.

Nick

--- Renegade vY2Ka2
 * Origin: Joey, do you like movies about gladiators? (1:229/426)