Re: Help with long term network problem



On 7 Apr 2006 08:39:53 -0700, "Gallon_Jug" <batsncats@xxxxxxxxxx> wrote:

Thanks Chuck,

Here is a list of the entire system with status. All 24/7 are hard
wired to network switch.

User IP MAC Status
DATA 192.168.0.2 00-50-DA-C9-AD-32 24/7
NEOBAT 192.168.0.4 00-12-3F-3B-29-A3 24/7
CMM-8200 192.168.0.3 00-08-A1-22-B8-66 24/7
DELL-510 192.168.0.7 00-13-CE-11-52-93 WIFI as needed
DELL 8400 192.168.0.5 00-11-11-3D-F2-29 24/7
Miguelito 192.168.0.6 00-14-A5-10-2B-EC WIFI as needed
Bliss 192.168.0.14 00-13-CE-2B-44-15 WIFI as needed


Using a CNET network switch connected to a CNet Wireless G router Model
CWR- 854. The settings on the router are for NO DHCP and all are set
as fixed IP addresses.

OK, the CWR-854 is a standard NAT router with a WAP. Are you using the NAT
feature (Internet service with one public IP address)? If so, your computers
ARE safe without PIS. NAT protects you from outside hacking.
<http://www.cnet.com.tw/product/cwr-854.htm>
http://www.cnet.com.tw/product/cwr-854.htm

Having the chart listing all of the computers is a great start.

You show Dell-510. Is that "Dell_D510"? The latter, from looking at "ipconfig
/all" shows only an Intel 2200BG WiFi connection - no Ethernet is apparent.

What is the CNET switch (model number please)? Why is it needed? Does the
switch connect to the LAN side of the CWR-854? The CWR-854 has its own 4 port
switch. You have a total of 4 wired computers, don't you?


I have everythng back on the system and connected again. I understand
the need to test with everythgn in normal connections as the target
keeps moving when I reconnect/boot etc. Hard to nail it down. I just
assumed form some other sites knowing how each computer was behaving
may have helped isoloate the problem to a specific one.

As a research scientist I understand looking at only one variable at a
time to determine cause and effect. So no problem on a slow methodical
plod. I have spent about a month off and on reading all of your varied
sections for error 53, 5 need for clean set up etc. and I have made
some changes like set all node types to Broadcast etc.

Well, I think we can both learn from this, if we're both patient and persistent.
We'll both research your problem. You have the fun part, because you are there
in front of it.

I will have to wait until Saturday when we are not working and need to
be connected for email etc. to take down the internet security. The
router does not stop hacking attempts as Panda had stopped many since
our ISP uses a fixed IP address. Not to mention a continual stream of
spy/adware crap from visitng web sites.

What you call hacking, I call "network level" attacks. There is very little
classical hacking going on, most attacks are merely infected computers,
attacking from the outside, and trying to infect your computers. These are
essentially worms, which are similar to viruses in that they spread virally.
<http://nitecruzr.blogspot.com/2005/07/hacking-redefined.html>
http://nitecruzr.blogspot.com/2005/07/hacking-redefined.html

By any chance, are you using the DMZ in the router? If you are, let's discuss
that first.

Maybe we both need to examine your security needs. Firewalls stop network level
threats, the sort of thing that will attack your computers from the fixed IP
address provided by your ISP.

Firewalls don't typically stop application threats, like adware and spyware.
Those you need to stop with layered security. One component in layered
security, which I refer to casually but is actually NOT a casual matter, is
common sense, and discretion.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

Now "kitchen sink" ware like NIS, MIS, and PIS, contains both firewall and anti
malware (anti adware / antispyware) components, and IMHO, neither at any
significant level. Modern malware is too resilient and versatile to be caught,
at any acceptable level, by "kitchen sink" ware (called that because it contains
"everything but the kitchen sink").

That's why I recommend layered security (including education of the folks who
access the Internet). Read about malware.
<http://nitecruzr.blogspot.com/2005/07/hacking-redefined.html>
http://nitecruzr.blogspot.com/2005/07/hacking-redefined.html

That said, I assure you that, if you keep your computers behind a NAT router,
you can un install PIS long enough to diagnose your Windows Networking issues,
IF you use the Internet wisely (or not at all) while PIS is un installed. As I
describe in my article, most adware / spyware (what was caught by PIS) is
trojans, acquired by Internet browsing.

To put it simply, if you have an ongoing problem with adware / spyware, you need
to do a little user education.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.
.



Relevant Pages

  • Re: Networking
    ... It is a simple direct cable network with no router. ... printer between these computers and let them access the net ... Also aren't these settings individual to each connection you set ...
    (microsoft.public.windowsxp.network_web)
  • Re: Networking
    ... It is a simple direct cable network with no router. ... printer between these computers and let them access the net ... Also aren't these settings individual to each connection you set ...
    (microsoft.public.windowsxp.network_web)
  • RE: Protecting the enterprise wireless network
    ... They way we set a similar wifi network is using 2Wire wifi access points ... connected to a Foundry switch, ... connection, ... You probably have several Mbs in Internet access, ...
    (Security-Basics)
  • Re: Networking
    ... It is a simple direct cable network with no router. ... printer between these computers and let them access the net ... Also aren't these settings individual to each connection you set ...
    (microsoft.public.windowsxp.network_web)
  • Re: home networking
    ... >>>I am trying to set up my home network with a desktop and laptop. ... >>>computers are running XP SP2 Home Edition. ... >>>can I use the existing wired connection? ...
    (microsoft.public.windowsxp.network_web)