Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


Forums › Desktop computing › Network isolation
Rikkitic

Awrrr
19065 posts

Uber Geek
+1 received by user: 16306

Lifetime subscriber

#242269 18-Oct-2018 15:53
Send private message

I have an old windows pc I use as a sacrificial goat for checking dodgy downloads. I also want to use it on doubtful sites and links. To do this it has to be able to connect to the Internet. What is the best way to shield it to be certain nothing gets access to my network?

 

 




Plesse igmore amd axxept applogies in adbance fir anu typos

 


 

Create new topic
wellygary
8810 posts

Uber Geek
+1 received by user: 5287


  #2110560 18-Oct-2018 16:14
Send private message

Vlan?



hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #2110566 18-Oct-2018 16:20
Send private message

Personally i have a separate VLAN for this, which doesn't share NIC or Switch at all with other data, It's then piped out a VPN.

 

i put far too many layers around it really, but i just... don't want to have to clean up after any sort of leak into my home network




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 

Rikkitic

Awrrr
19065 posts

Uber Geek
+1 received by user: 16306

Lifetime subscriber

  #2110571 18-Oct-2018 16:26
Send private message

It needs to be something reasonably simple that I can understand. My networking know-how is about the same as Donald Trump's comprehension of international politics.

 

 




Plesse igmore amd axxept applogies in adbance fir anu typos

 


 



hio77
'That VDSL Cat'
13036 posts

Uber Geek
+1 received by user: 3896

ID Verified
Trusted
Lizard Networks
Subscriber

  #2110572 18-Oct-2018 16:27
Send private message

Rikkitic:

 

It needs to be something reasonably simple that I can understand. My networking know-how is about the same as Donald Trump's comprehension of international politics.

 

 

Building walls and hiking import tax is quite an comprehensive thing to jump into though!




#include <std_disclaimer>

 

Any comments made are personal opinion and do not reflect directly on the position my current or past employers may have. 

Mattmannz
471 posts

Ultimate Geek
+1 received by user: 88


  #2110596 18-Oct-2018 17:21
Send private message

You need a layer 3 capable device such as a router or firewall that not only supports vlan's but allows you to put restrictions in place so that you can block traffic from your sacrifical vlan to your main vlan. 

 

 

 

Don't use the DMZ feature that some routers offer as whilst that might sound exactly what you need usually all it does is allow all inbound traffic through to a specific host and doesn't really protect your internal network.

timmmay
20858 posts

Uber Geek
+1 received by user: 5350

Trusted
Lifetime subscriber

  #2110601 18-Oct-2018 17:39
Send private message

I just use one PC with antivirus running. I haven't had any major problems ever. I keep excellent backups in multiple locations in multiple formats though, so if something goes wrong I'm well covered.

 
 
 
 

Shop now on Samsung phones, tablets, TVs and more (affiliate link).
coffeebaron
6304 posts

Uber Geek
+1 received by user: 3567

Trusted
Lifetime subscriber

  #2110602 18-Oct-2018 17:42
Send private message

Turn all other PCs & devices off whilst you use the dodgy PC. You rural broadband router won't do VLAN etc :(

 

 

 

 




Rural IT and Broadband support.

 

Broadband troubleshooting and master filter installs.
Starlink installer - one month free: https://www.starlink.com/?referral=RC-32845-88860-71 
Wi-Fi and networking
Cel-Fi supply and installer - boost your mobile phone coverage legally

 

Need help in Auckland, Waikato or BoP? Click my email button, or email me direct: [my user name] at geekzonemail dot com

Create new topic








Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.


Updates »

Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.








RSS feeds
Main feed
Forums feed
Copyright
©2002-2026 Geekzone®
Site features
Geekzone BI dashboard
Geekzone Badges
Geekzone Status Page

 

Site Information
Subscribe to Geekzone
Privacy Statement
Forum Usage Guidelines (FUG)
Advertising
Trademark and copyright