TOOL_5150

This is your issue. You/someone needs to set up a security policy so the computers do not have access to each other. I do however dont believe you can achieve that with the simple router that was provided.

~Matt

__________________
I would rather beg for forgiveness then beg for permission.

BadSplice

Like with all Routers, the instructions are pretty complicated and make you jump thru hoops when you don't have to. Since there were no complaints about not being able to get onto the network, I assume all the settings are currently correct (DNS, DHCP, etc.). There's no need to use the Installation CD (unless you want the Router manufacturers bloatware on each machine).

However, the top of page 52 of the instructions gives a good picture of what I was talking about. All you need is "TCP/IP", the "File and Print Sharing" as well as "Client for Microsoft Networks" should be removed.

I_get_shocked

Explain this to the owner... Itunes uses something called network discovery. It broadcasts itself over the subnet from which its connected to and allows the playlist to be shared which is totally different from file sharing.

The owner is absolutely correct in worrying! You have an OPEN network? Unsecure? That is a huge problem. Any tool from off the street can connect to the network and start hacking and spreading his viruses. Did you change the router pw? I am guessing no- That network can be taken over in about 2 minutes.



Step 1. LOCK the network down with WEP.
Step 2. Change the default pw to the router/ap
Step 3. Advise tenants to install a software firewall on their computers.

31b

they should have the wireless access point secured, but even after doing that, you'll still see other people's iTunes libraries shared if they have it turned on.

wildleg

I'm not familiar with itunes software, but it seems if you block the following two ports that itunes sharing can't happen (for pc):
Port 3689 TCP
Port 5353 UDP

__________________
That tiger ain't go crazy; that tiger went tiger! You know when he was really crazy? When he was riding around on a unicycle with a Hitler helmet on! - chris rock

mikeh32

and to the op, if you want to know how to block those ports

please goto www.portforward.com

from there, type in the router info, and the app you want to block. though the site is geared on how to allow it, just reverse the process

31b

to block ports on a Mac, go to the System Preferences:


then select Security:



turn on the firewall, and block the ports you wish.

Joshua

Hey all, I am a former electrician now EE student who is working as an IT guy.

There are a number of solutions to this that could give each tenant their own secured network (4 different access points, a router with different subnets connecting to separate wifi ap's, etc) but in this case it really is up to the tenants to make sure they have their own firewall running. Such a setup is inherently insecure but such is the nature of a free internet connection. I know that one could even go so far as to create separate virtual private networks for each tenant and still use the same access point, but then again that would require a much different router. I know i have achieved the same using a cheap (older) thin client computer running a linux distribution like ipcop or m0n0wall, but again that is something completely different than this situation.

You did your job and installed the requested equipment, if he wants something different then he needs to be willing to spring for the appropriate equipment. In keeping this setup, I would just recommend everyone turn off their file/printer/iTunes library sharing.

Just my $0.02.

Josh

wilbilt

I would agree. We have over 600 Macs on our school district network. By default, they are chatty and want to share everything. iChat is another app that can cause headaches.

I am also wondering how the landlord's ISP would feel about him sharing a single internet connection with the tenants.

BadSplice

That's the first thing that I thought of when I read this. I wonder what the rules are for making "Hotspots". I was going to set one up at my condo, but I didn't want to get into a legal tangle with the ISP.

31b

uhh no, by default, the Mac doesn't share anything.

MDShunk

That was one of the questions I posed, but the connection was specially purchased for this use. The ISP is well aware of what the intended use is to be. Unless the whole building decides to download feature length movies all day long, he's in good shape.

__________________
-Marc, ABC, XYZ, PhD, 1-2-3

-Someday, I'll wear pajamas in the day time.

wilbilt

Perhaps "share" is the wrong term. "Promiscuous" might be more realistic. I am a longtime Mac user, but still find it interesting to plug one in to the network and watch the traffic to see what it's broadcasting.

mikeh32

i honestly feel this is not your issue. you are an electrician, not a network admin.

you did your part of installing it, nothing was said about configuration.

if i was doing this job, id do it for $100, and thats being nice. thats just the configuration

wilbilt

It is good to know connections with "shared" provisions are available. I know satellite TV providers have/had differing contract provisions for shared viewing depending on the circumstances. "Free to Guest" programming (i.e., a TV in a bar or restaurant) had different terms than "Paid Guest" viewing (hotels, etc.)

I suppose the situation may be similar with internet access. Offering connectivity to tenants or hotel guests is likely treated differently than simply creating a free hotspot.

AussieApprentice

There is software for using a standard wireless router as a hot spot such as http://www.freewarepark.com/freeware...-software.html. I haven't used this software myself but it should cover most issues including making sure that everyone gets fair use of the bandwidth.

I personally would prefer to use one of the newer hardware solutions

BadSplice

Such as...?

Any recommendations would be appreciated.

I'd really like to set up a big hotspot at my condo. There are 20 units and many of them are older people paying $55 each for cable or FIOS internet access. I doubt they are download huge files, so a single connection shared wirelessly could be a good thing for everyone.

AussieApprentice

I can't recomend anything in particular but this is one example.
http://www.sohoware.com/span/new_soh...ct/wsg4000.htm

MDShunk

The Engenius AP's that I normally use take that software.

__________________
-Marc, ABC, XYZ, PhD, 1-2-3

-Someday, I'll wear pajamas in the day time.

Adil Mania

Here, you use one methodology. You just write one agreement which is for agreement, like contract. First you just check which tenant use most and you start contract system.