Network isolation

Forums › Desktop computing › Network isolation

Rikkitic

Awrrr
18657 posts

Uber Geek

Lifetime subscriber

#242269 18-Oct-2018 15:53

I have an old windows pc I use as a sacrificial goat for checking dodgy downloads. I also want to use it on doubtful sites and links. To do this it has to be able to connect to the Internet. What is the best way to shield it to be certain nothing gets access to my network?

Plesse igmore amd axxept applogies in adbance fir anu typos

wellygary

8312 posts

Uber Geek

#2110560 18-Oct-2018 16:14

Vlan?

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2110566 18-Oct-2018 16:20

Personally i have a separate VLAN for this, which doesn't share NIC or Switch at all with other data, It's then piped out a VPN.

i put far too many layers around it really, but i just... don't want to have to clean up after any sort of leak into my home network

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Rikkitic

Awrrr
18657 posts

Uber Geek

Lifetime subscriber

#2110571 18-Oct-2018 16:26

It needs to be something reasonably simple that I can understand. My networking know-how is about the same as Donald Trump's comprehension of international politics.

Plesse igmore amd axxept applogies in adbance fir anu typos

hio77

12999 posts

Uber Geek

ID Verified

Trusted

Lizard Networks

#2110572 18-Oct-2018 16:27

Rikkitic:

It needs to be something reasonably simple that I can understand. My networking know-how is about the same as Donald Trump's comprehension of international politics.

Building walls and hiking import tax is quite an comprehensive thing to jump into though!

#include <std_disclaimer>

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have.

Mattmannz

471 posts

Ultimate Geek

#2110596 18-Oct-2018 17:21

You need a layer 3 capable device such as a router or firewall that not only supports vlan's but allows you to put restrictions in place so that you can block traffic from your sacrifical vlan to your main vlan.

Don't use the DMZ feature that some routers offer as whilst that might sound exactly what you need usually all it does is allow all inbound traffic through to a specific host and doesn't really protect your internal network.

timmmay

20574 posts

Uber Geek

Trusted

Lifetime subscriber

#2110601 18-Oct-2018 17:39

I just use one PC with antivirus running. I haven't had any major problems ever. I keep excellent backups in multiple locations in multiple formats though, so if something goes wrong I'm well covered.

coffeebaron

6231 posts

Uber Geek

Trusted

Lifetime subscriber

#2110602 18-Oct-2018 17:42

Turn all other PCs & devices off whilst you use the dodgy PC. You rural broadband router won't do VLAN etc :(

Rural IT and Broadband support.

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com