VPN and home network

Forums › LAN (ethernet/Wifi/routers/Bluetooth) › VPN and home network

dothack

79 posts

Master Geek

#96999 8-Feb-2012 22:54

Okay all your network buffs. Can someone tell me the answer to this question?
If I have a couple computers on my home network i.e. a laptop and desktop which has a shareded folder which both computers can see and use. If I then connect one of the computers on my home network to a VPN service can someone at the other end of the VPN service then access my network as if they were on my home network. i.e access the shared folders i have? tried finding an answer to this and couldn't find anything so appreciate any help or links to topics that discuss how this works etc.

gjm

808 posts

Ultimate Geek

#579013 8-Feb-2012 23:09

well they have the ability to see your computer but their access to the folder will depend on the share permissions as well as the folder permissions that you have set up. It will also depend on your firewall, if any, that you have turned on on your pc and what the rules are set to.

Short answer then....maybe.

Edit.....are you talking about a work vpn or something like witopia?

Do surveys for Beer money (referral link) - Octopus Group

Link for buying beer (not affiliated, just like beer) - Good George

raytaylor

4014 posts

Uber Geek

Trusted

#579030 9-Feb-2012 00:04

dothack: If I then connect one of the computers on my home network to a VPN service can someone at the other end of the VPN service then access my network as if they were on my home network. i.e access the shared folders i have?

Thats typically what you use a VPN for.

Windows XP Professional / Vista / 7 pro have a built in VPN server which you can use to bridge an incoming VPN connection into your existing network, and make the distant computer work as if it is directly hard wired up.

You need to forward the VPN ports in your router to your VPN Server computer, and setup the computer to recieve the incoming connections.

There are however different ways to set it up. With firewalls and other stuff you can limit what the distant computer can access - but thats getting into more of a corporate fancy setup. A simple home connection would just be to bridge the dstant computer into the existing home network.

Ray Taylor

There is no place like localhost

Spreadsheet for Comparing Electricity Plans Here

Green

18 posts

Geek

#579033 9-Feb-2012 00:10

It can depend on the VPN solution being used. From memory, the standard Windows VPN client/solution blocks WINS/NetBios broadcasts from being routed through the tunnel, so you can't just browse the network to find the computer/share. However, if you already know the IP address of the machine then I believe that '\\<IP\SharedFolder' still works.

Do a google on the terms 'wins netbios vpn', and you get a host of articles on the matter.

dothack

79 posts

Master Geek

#579072 9-Feb-2012 07:55

Hi everyone thank you for your replies.
hi yes im meaning more like if i use one of these vpn services strongvpn. So i guess i would be the client and they would be serving the vpn. As far as i understood as @raytaylor has said vpn is a two thing? so wouldn't this potentially open my network to someone at the hosting vpn service?

webwat

2036 posts

Uber Geek

Trusted

#579310 9-Feb-2012 15:30

dothack: Hi everyone thank you for your replies.
hi yes im meaning more like if i use one of these vpn services strongvpn. So i guess i would be the client and they would be serving the vpn. As far as i understood as @raytaylor has said vpn is a two thing? so wouldn't this potentially open my network to someone at the hosting vpn service?

The VPN bypasses the firewall functions of your router, so yes it opens your whole network to security issues and its a two way thing. Anyone who has access to the VPN has access to the computer it's running on, and potentially access to your network if they manage to take over that computer.

Blocking remote access by firewalling the VPN computer would reduce those risks, but if you actually want to open access to specific internet users, then you probably want to secure their end of the VPN and restrict the VPN to only that users IP address.

Time to find a new industry!

chevrolux

4962 posts

Uber Geek
Inactive user

#579685 10-Feb-2012 12:32

But do you actually think the people from strongvpn/astril/witopia have the need or want to take the time to troll through their thousands of connection to find a shared folder with a bit of music in it or whatever? Personally I don't think you have anything to worry about.

richms

28169 posts

Uber Geek

Trusted

Lifetime subscriber

#579982 10-Feb-2012 21:44

What about other users on the VPN server in the same private IP range?

Anyway, untick the file and printer sharing stuff on the VPN adapter, probably untick client for MS networks too so you are not spewing stuff out the VPN etc, and any other clients too. Then also firewalling etc.

Richard rich.ms

Quic Broadband

Move to New Zealand's best fibre broadband service (affiliate link). Note that to use Quic Broadband you must be comfortable with configuring your own router.

Ragnor

8219 posts

Uber Geek

Trusted

#580028 10-Feb-2012 23:25

If the vpn is setup as a virtual network card/connection in Windows 7 or Vista it will prompt you for what type of network this is Home, Work or Public.. if you select public windows file sharing is blocked in/out that interface.

Also I believe with for example OpenVPN it depends whether it's a routed or bridged connection, typically a routed vpn connection would block broadcast protocols that windows uses for network eg: NetBIOS.

dothack

79 posts

Master Geek

#580592 12-Feb-2012 21:23

@ragnor great tip. Thanks everyone for your comments.