file server/networking question

[blue jammer]

I have a 4 port router connected to the NTL STB, which feeds my pc and both my housemates pc's, leaving 1 port free.

I want to set up a file server for mp3's on a spare machine, but don't want to let this machine have internet access of any kind.

What is the best way to do this, so that I can access this machine from my pc and my housemates can access it via their machines, but keeping it from having net access?

All the machines are running Win XP Pro.

[Stuart]

Depends on the router. My router (D-Link DI624) allows you to set up filters to allow/disallow internet access to specific pcs.

[rdhw]

Originally Posted by blue jammer

What is the best way to do this, so that I can access this machine from my pc and my housemates can access it via their machines, but keeping it from having net access?

It's not clear what you are trying to achieve by not letting it have network access: since it's behind a NAT router, no-one from the outside world will be able to connect in to it anyway.

If you really do want to disable its internet access you could do either of these:

1. Use the route command to delete the default IP route 0.0.0.0, so that it can only talk to the local sub-net on your LAN;

2. Install NetBEUI on all 3 PCs. Disable TCP/IP on the special PC. On the special PC, bind File and Print Sharing to NetBEUI. On the other PCs, ensure that Microsoft Client is bound to NetBEUI.

[Stuartbe]

Originally Posted by blue jammer

I have a 4 port router connected to the NTL STB, which feeds my pc and both my housemates pc's, leaving 1 port free.

I want to set up a file server for mp3's on a spare machine, but don't want to let this machine have internet access of any kind.

What is the best way to do this, so that I can access this machine from my pc and my housemates can access it via their machines, but keeping it from having net access?

All the machines are running Win XP Pro.

You have three options as I see it.

1. Install a personal firewall on the machine and set up a rule only alowing access to the local subnet.

2. Set the proxy in internet options in control panel to a non existant IP and port. The problemis that it will only stop the browser getting out and not any other apps.

3. Set up the connection manualy and leave the default gateway blank. The pc will only be able to talk to the local subnet.

As several people have stated - There realy is no piont in doing this as nothing from the net will be able to access the pc unless you map ports ect.

[altis]

My router supports outbound packet filtering. Using this it is possible to deny all access to the outside world from any machine.

[blue jammer]

Thanks for the suggestions.

I read somewhere you are only allowed to connect 3 PC's to the net with NTL, so thats why I wanted to block this 4th PC that would be connected to the router as a file server.

I like the sound of the firewall idea, that'd be easy to do and would block it nicely, will try that later.

Here's another quick question if I may..

I have an old network hub (10 port) that I could plug in to my 4 port router, if I did this and ran a file server and a laptop through this, would this be ok, as neither would be used for net access, I want to set up a linux install of freebsd on the laptop and it'd be handy to network the lot, so I can still have access to the network of local PC's.

If doing so, will all the PC's currently assinged local IP addresses, be able to access the 2 PC's plugged into the old hub, in turn plugged into the router and vice versa?

OR, would I need to setup some kind of sub network?

Please explain as if you were explaining it to a 4 year old, as I'm not crash hot with networking!

[SMHarman]

The NTL 3 PC thing is a guideline, not a rule and likely for them to be difficult to detect in any case. Its more about bandwith usage and sharing than an actual number of PCs.

I think the principal concern was to prevent No 7 High St signing up for 1mB broadband and plugging a wireless router on it so No 3, 5, 9 and 11 could all access the Net from the one connection. Most houses will only have 3PCs max. If you have more then don't worry. You're unlikely to be using them all at once for BB intensive tasks.

[altis]

You can happily plug a hub into the router - but remember to use a x-over cable or an up-link port of the hub. This will kind'a expand the number of ports on the router. Normally, you can continue like this until you have 250 odd machines connected. All will have access to the outside world - unless you can configure the router to disable them.

[blue jammer]

I have an X-over cable, as I was instructed to get one by NTL before 'going live' but as my box is an older model, it was just a standard cable that was needed.

Again, thanks for all your help