Internet and file sharing setup and security

Y

y2kbugger

n00b
Joined
Apr 13, 2011
Messages
32
Right now I am looking to network:
  • 1 Workstation
    • stores all media
    • stores acronis backup images of both OS drives
    • backups of media and OS images are handled with externals
    • single Ethernet
  • 1 Laptop
    • has ethernet port
    • access media
    • backup with Acronis B&R10 over network to workstation
  • 1 Ethernet
    • university(very large LAN with many IT script kiddies)
    • supply both PCs with internet

both PCs will have full drive encryption using (i think) truecrypt
both are win7

Since there are many kiddie hackers, some with talent, this network needs to be very secure.

I am going to use a router with some sort of custom firmware so that I can use a repeater bridge to access wifi that my laptop alone just barely sees.

It would also be very beneficial to be able to access the storage drives in the same manner from each PC (my [manually] synced FF profile extensions will both reference "drive X"\downloads\ as the download location.

I would also like certain things such as my word/excel-docs/FF-profile-folder to transfer in a certain direction (I don't think I would trust a smart syncer, but who knows) upon command. I read on here that Super Flexible File Synchronizer is good.

I don't think truecrypt can fight any network data theft attacks since the drive would normally be unlocked but using a windows lockscreen(this prevents the common tactic of booting off a flash and removing windows password)

What should I look into to make a secure network drive/share?
 
Just spent 7 hours reading about how networks function at the fundamental level. It seems like a router gives good security from the outside.

But what about if the routers incoming is also a private network?

Also I feel I should stay away from homegroups, is this a correct feeling?

What kinds of firewall should I use?
 
y2kbugger said:
I don't think truecrypt can fight any network data theft attacks since the drive would normally be unlocked but using a windows lockscreen(this prevents the common tactic of booting off a flash and removing windows password)
Click to expand...
If you can't physically secure your computers you can't secure them. Period.

http://www.schneier.com/blog/archives/2009/10/evil_maid_attac.html

The best you can do are the steps you are already planning. This will work against unsophisticated or unmotivated prying eyes.

Make sure to use strong passwords on everything since it sounds like your shares will be visible on the entire LAN.
 
wow that evil maid attack is poetically simple and elegant in theory.

What is the best way to actually create the shares? is windows sharing ok at all? What can all be probed from behind a router?

here's a diagram



Uploaded with ImageShack.us
 
Last edited:
Does anyone know what type of thing I should research to find out how to share data? and also what the security implications of my lan situation are?
 
So basically you are in college and want to protect your two PCs from the rest of the campus network? But you want to be able to share files between them securely?

Doing things like plugging routers (even switches in some cases) into campus network connections are normally forbidden for several reasons. Your best bet would be to just never connect to the college network if you are that concerned / paranoid. Invest in a 3G card and an external hard drive for sharing data between your two computers, or something like a 4g hotspot that you can connect your desktop and laptop to and audit on a regular basis.

A router is not really what you are looking for. A firewall (either hardware or software) would give you more control over what traffic comes in or out. With that said, most consumer grade routers do have some basic firewalls and other security measures built in.

as always, check with your friendly neighborhood admin first, and stay safe out there.
 
So basically you are in college and want to protect your two PCs from the rest of the campus network? But you want to be able to share files between them securely?
Click to expand...
Precisely

Elaborating, having a portable harddrive is how I do it now. This is by far the most secure. I guess my question really should have been: "Since I do want backups and media to be aggregated with less maintenance that I currently do, Is there a secure way to do this?"

Since you mentioned the problems with connecting a router, I looked up what they may be and noticed Rouge DHCP as a potential problem. Not really sure what to make of this though.

I do want to compare other options with continuing to use a hard drive.

I also have come to see the vulnerabilities of truecrypt, how it probably not worth the hassle, and how I should probably worry more about keeping my pc keylogger free and not letting FF hold my passwords.

edit: I know that I hate people who ask for advice and then complain about how "it not the answer I wanted". I do want you to know that I really am taking what you said into consideration, and do appreciate it.

All that said, another part of setting up this network is to learn more about networking/network security.
 
Last edited:
Here is some pretty good info that you may want to read through to get started
http://www.bitvise.com/file-sharing

A fun project that you may want to try out is building a untangle box and use it in transparent (bridge) mode. It will seamlessly sit in between the campus network and your computers and allow just about any kind of traffic filtering you can imagine. Plus it can do some other pretty neat things.

Here is their website, you will need some decent hardware to run it, but you can pick up a nice little supermicro 1u barebones server for around $300 and run untangle off a compact flash card or old hard drive.

http://www.untangle.com/Products/untangle-libitem-lite-package

http://www.newegg.com/Product/Product.aspx?Item=N82E16816101262

Or you could build / find / borrow a budget PC to be your untangle box. Even something like an old Pentium III could get you started until you can build / buy a better box.

You would basically do
Campus Network --> eth0 of the untangle box --> eth1 untangle box --> unmanaged switch of your choice --> laptop & PC.

Or you could get even more fancy and toss a managed switch in there, or access point, or whatever other devices you want to play with at the time.
 
I'm trying to remember wether my old p4 has dual gigabit lan, if so This could be pretty cool. Also I haven't read the links yet, but thankyou. I'm excited about this now that I have some cool reading material to start from.
 
I guess the largest benefit of untangle vs dd-wrt i a better "view" of whats happening as you describe as well as (i assume) logging. with of course better all around control.

Anyone have any experience with both of these, how do they compare? are they even comparable?
 
You must log in or register to reply here.
Back
Top