How to prevent network sharing?



  • Hi all
    I have seen a characteristic in some access-points and it was Client Isolation. Its very nice for security and make every computer save and prevent virus from spreading and destroy network.



  • Are you asking if pfSense supports the feature of client isolation for wireless?

    Did you look at the options you get when configuring a wireless interface?
    (Hint: Read the description of the option "Allow intra-BSS communication" )



  • sorry for confusion
    but i dont mean it in wirless. i want this Prevention in wired network. i connect client to server by switches not wireless and nead to close network sharing to prevent many things like virus from transfering- spying - isolate the problems 
    (i just mention it im wirless to show my piont)



  • Not understanding.  How do you keep one host on a LAN from seeing other hosts?  Yes, you can do it, but it can get very complicated and expensive.



  • Hi all
    I have seen a characteristic in some access-points and it was Client Isolation. Its very nice for security and make every computer save and prevent virus from spreading and destroy network.

    For virus protection, just install antiv/malware remover and tell them to update regularly.


  • Rebel Alliance Developer Netgate

    @abd2002390:

    sorry for confusion
    but i dont mean it in wirless. i want this Prevention in wired network. i connect client to server by switches not wireless and nead to close network sharing to prevent many things like virus from transfering- spying - isolate the problems 
    (i just mention it im wirless to show my piont)

    You need managed switches that include a "private VLAN" feature that only allows client ports to talk to the gateway port.



  • use more nic's on your pfsense box ;) and have them configured each for different gateways, subnets, and smaller group of computers. do not bridge any of them. and if you are an administrator, install on each computer a robust firewall, antivirus, and internet security software.


Locked