I have a setup like this at home, and yes - I use DMZ pinholes to allow traffic through to my "secure" internal network. However, I don't worry about much (i.e. file sharing and printing) - I only allow port 22 (SFTP/SSH) and 3389 (Terminal Services) through. But lets be realistic here...this is your Mom's setup. We can argue all day about how insecure 802.11 protocols are even when "secured" (i.e. WEP, WPA, MAC filtering, etc) but the bottom line is for Mom's connection if you setup WEP and change the router's default password you are about 5x ahead of the average household. Yes a DMZ is best, yes this setup (WEP only) is relatively "risky", but do you want to have to make Mom's network/life so complicated? :) Unless Mom is running a home business or something, I think just the router and WEP should be OK. We don't need to over engineer every solution..most war drivers will see the WEP enabled and move on to a much easier target (because there are plenty). sk3tch -----Original Message----- From: tclug-list-bounces at mn-linux.org on behalf of The Wandering Dru Sent: Mon 12/29/2003 12:37 PM To: TCLUG Mailing List Subject: [TCLUG] Wi-Fi security question My mom is looking to go the wireless route in the near future for her laptop. I know a lot of you that use wireless put the AP on the DMZ of your firewall. My question is this, do you pinhole the firewall to allow certain services(ie, filesharing, printing, etc.) back into the LAN or do you just limit the AP to internet access? Or is there some other fancy way to allow these services that I'm not aware of? I'm mostly just looking for a security/convenience trade-off comparison. I have nearly no expereince with wireless and would like to come up with a plan/cost before I go buying stuff willy-nilly on my mom's bill. -- The Wandering Dru <dru at druswanderings.net> http://druswanderings.net <--- Things 'n' Such Get nifty TCLUG merchandise at the TCLUG Store! http://www.cafeshops.com/tclug _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list -------------- next part -------------- A non-text attachment was scrubbed... Name: not available Type: application/ms-tnef Size: 3724 bytes Desc: not available Url : http://shadowknight.real-time.com/pipermail/tclug-list/attachments/20031229/fd9b1a5e/attachment.bin -------------- next part -------------- _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list