Broadband on a LAN advice please

I've just got broadband, with NTL. It all works fine and I'm quite pleased.
Current config is two PCs (one is portable only connected sometimes)
networked via Ethernet using UTP cable and a Netgear hub. The cable modem
connects to the hub also.
I understand that I should, ideally, use a router as well. This would
provide a firewall and allow multiple users of the Internet connection.
Currently however, I am the only one using either of the PCs and so one
connection at a time is fine.
So, do these points make any sense?

1. There is a potential security issue as I am open to people on the net
accessing my data, if I enable file sharing.
2. If I am using NetBEUI for the LAN and TCP/IP only for the Internet, does
the security issue still apply?
I can bind file sharing to NetBEUI but not to TCP/IP. Does that solve the
problem?
3. If I run a software firewall, e.g. ZoneAlarm, will that prevent Internet
access to my data?

I probably will get a router in due course. I will be getting another
full-size PC, and would like the portable to be able to access the LAN and
Internet wirelessly. I am thinking of a Buffalo, which provides the wireless
networking, and is a router and hub also, I believe.
In the meantime I want to understand how things work and configure my setup
as best as I can.

What do you think? Any advice appreciated.

John


P.S. I don't want to link the cable modem direct to a PC via a second NIC,
and use ICS, as I don't want to have both the PCs on just to see the
Internet. The hardware approach seems the better option anyway.

P.P.S. I would remove NetBEUI if possible, if only in the interests of
keeping things simple, but have had problems making the LAN work on TCP/IP.
NetBEUI works ok.

In message <E0yxb.27$(E-Mail Removed)>, John
Fryatt <(E-Mail Removed)> writes:

>I've just got broadband, with NTL. It all works fine and I'm quite pleased.
>Current config is two PCs (one is portable only connected sometimes)
>networked via Ethernet using UTP cable and a Netgear hub. The cable modem
>connects to the hub also.
>I understand that I should, ideally, use a router as well. This would
>provide a firewall and allow multiple users of the Internet connection.
>Currently however, I am the only one using either of the PCs and so one
>connection at a time is fine.
>So, do these points make any sense?
>
>1. There is a potential security issue as I am open to people on the net
>accessing my data, if I enable file sharing.

Possibly.

>2. If I am using NetBEUI for the LAN and TCP/IP only for the Internet, does
>the security issue still apply?

Probably not.

>I can bind file sharing to NetBEUI but not to TCP/IP. Does that solve the
>problem?

It should do, barring future exploits.

>3. If I run a software firewall, e.g. ZoneAlarm, will that prevent Internet
>access to my data?

Not necessarily. ZA is bl**dy good as an application watcher,
preventing unwanted outbound comms. It is (unless subverted) also
pretty good at watching inbound nasties. The problem is when you might
have inadvertently invited them.

I use a version of ZA, and I trust that with my normal habits it is
sufficient. This mmight not apply to everyone - but ZA(P) is a huge lot
better than nothing. Ignore all logs, BTW...

>I probably will get a router in due course. I will be getting another
>full-size PC, and would like the portable to be able to access the LAN and
>Internet wirelessly. I am thinking of a Buffalo, which provides the wireless
>networking, and is a router and hub also, I believe.
>In the meantime I want to understand how things work and configure my setup
>as best as I can.
>
>What do you think? Any advice appreciated.

Looks like you're working this out OK.

>P.S. I don't want to link the cable modem direct to a PC via a second NIC,
>and use ICS, as I don't want to have both the PCs on just to see the
>Internet. The hardware approach seems the better option anyway.

Definitely. Work out what you want to do with your connection, and make
sure any router you buy is more than up for that task, as in six months
time you'll be more ambitious.

>P.P.S. I would remove NetBEUI if possible, if only in the interests of
>keeping things simple, but have had problems making the LAN work on TCP/IP.
>NetBEUI works ok.

If it works, leave it. Me, I stick to TCP/IP, and make sure things are
kept separate.

--
Jim Crowther "It's MY computer" (tm SMG)
Avoid more swen by dumping your old Usenet addresses, and
put 'spam' or 'delete' somewhere in the Reply-to: header.
Help yourself avoid the spam: <http://keir.net/k9.html>

Hmm, thanks Jim.

I am a bit puzzled now. Yesterday, the first day I had the broadband, what I
said appeared to be true that I could connect either PC to the Net, I think.
Now, however, I can't make the notebook see the Internet. I'm still
fiddling, but I expect I got confused yesterday.
I think maybe I'll get the router anyway. In any case I want to be able to
hook up the portable without trailing wires around, so one of those routers
thingys with the 802.11 wireless link looks good.

John


"Jim Crowther" <Don'(E-Mail Removed)> wrote in message
newso5cF0mLLrx$(E-Mail Removed).. .
> In message <E0yxb.27$(E-Mail Removed)>, John
> Fryatt <(E-Mail Removed)> writes:
>
> >I've just got broadband, with NTL. It all works fine and I'm quite
pleased.
> >Current config is two PCs (one is portable only connected sometimes)
> >networked via Ethernet using UTP cable and a Netgear hub. The cable modem
> >connects to the hub also.
> >I understand that I should, ideally, use a router as well. This would
> >provide a firewall and allow multiple users of the Internet connection.
> >Currently however, I am the only one using either of the PCs and so one
> >connection at a time is fine.
> >So, do these points make any sense?
> >
> >1. There is a potential security issue as I am open to people on the net
> >accessing my data, if I enable file sharing.
>
> Possibly.
>
> >2. If I am using NetBEUI for the LAN and TCP/IP only for the Internet,
does
> >the security issue still apply?
>
> Probably not.
>
> >I can bind file sharing to NetBEUI but not to TCP/IP. Does that solve the
> >problem?
>
> It should do, barring future exploits.
>
> >3. If I run a software firewall, e.g. ZoneAlarm, will that prevent
Internet
> >access to my data?
>
> Not necessarily. ZA is bl**dy good as an application watcher,
> preventing unwanted outbound comms. It is (unless subverted) also
> pretty good at watching inbound nasties. The problem is when you might
> have inadvertently invited them.
>
> I use a version of ZA, and I trust that with my normal habits it is
> sufficient. This mmight not apply to everyone - but ZA(P) is a huge lot
> better than nothing. Ignore all logs, BTW...
>
> >I probably will get a router in due course. I will be getting another
> >full-size PC, and would like the portable to be able to access the LAN
and
> >Internet wirelessly. I am thinking of a Buffalo, which provides the
wireless
> >networking, and is a router and hub also, I believe.
> >In the meantime I want to understand how things work and configure my
setup
> >as best as I can.
> >
> >What do you think? Any advice appreciated.
>
> Looks like you're working this out OK.
>
> >P.S. I don't want to link the cable modem direct to a PC via a second
NIC,
> >and use ICS, as I don't want to have both the PCs on just to see the
> >Internet. The hardware approach seems the better option anyway.
>
> Definitely. Work out what you want to do with your connection, and make
> sure any router you buy is more than up for that task, as in six months
> time you'll be more ambitious.
>
> >P.P.S. I would remove NetBEUI if possible, if only in the interests of
> >keeping things simple, but have had problems making the LAN work on
TCP/IP.
> >NetBEUI works ok.
>
> If it works, leave it. Me, I stick to TCP/IP, and make sure things are
> kept separate.
>
> --
> Jim Crowther "It's MY computer" (tm SMG)
> Avoid more swen by dumping your old Usenet addresses, and
> put 'spam' or 'delete' somewhere in the Reply-to: header.
> Help yourself avoid the spam: <http://keir.net/k9.html>