Host-To-Host File Sharing Security, please help.
-
All the Users in the house want to share files. However, I don't want to setup the network in such a way, unless I can "secure" it. I remember some years ago trying to create a WORKGROUP with the other Users in the LAN and one PC got all other host corrupted. Not that pFsense can stop corrupted file transfers, I just don't want the Protocols exposed to, and/or compromised by non-authorized host on the network. The reason 'this' group wants to share files, we work on CS:S maps together, share pictures and Photoshop projects, plus any other data we could share. Some time in the future I will set up a Server for Hosting files and games to the LAN, no WAN.
What I want to do is setup a secure, possibly encrypted, solution for transferring files host-to-host inside the LAN, since I don't have a server for this yet.
My network is a simple setup. I have three host and a Private Wifi Access Point on a static LAN(10.x.x.0/29), one of the host(x.5) is connected to the 'WifiAP' broadcast. The WifiAP is a Manageable Router/Switch and has an Address of 10.x.x.2 to access the WebGUIManager. Host x.3 & x.4 are plugged into the Broadcast Domain, nothing is plugged into the WAN Interface, host x.5 is over the WifiAP broadcast with MAC filtering Enabled and ESSID Disabled. I will not be setting up File Sharing with the host over Wifi broadcast, simply for security reasons.
I want to File Share between host x.3 & x.4, all other host will have reject rules placed on them. Is there a program that would be better suited for this situation, over using WinXP/7 for sharing files? Windows seems really insecure! What would be the proper 'rule set' for keeping WAN/Internet activity away from the 'workgroup'? And the big nub Q of them all, 'what protocols does ms/winXP-7 use for File Sharing'?
Thank you for reading,
Marklar -
You can't do that without forcing all traffic to go through pfSense.
As for file sharing in Windows - SMB/CIFS. You can certainly set up shares between 2 boxes, secured by passwords - as long as you don't shared the passwords with the unauthorised users they won't trivially be able to access those shared.
