HELP!

[bigmoose]

Hi guys, have watched forever but this is my first post.

I have an issue and would love some help if you all have the time.

I'm a 3D animator that has had to move back into his childhood home to help with care etc.

No pity, all is well.

I'm moving back a workstation and a server (debian buster no vms).

What is the best way to secure my new network properly?

 

The network:

 - DHCP at router

 - spreads over ethernet to 3 low level pcs (accessible by someone with dimentia) - they're locked down so he can't do anything ridiculous.

 - 2 APs

 

 - "NEW" large workstation and server
 

 

[passwordispassword]

Install a decent webfilter to block spam. Use a VPN on everything. Require a password to make admin level changes. Require a password for network file sharing between computers

[bigmoose]

2 minutes ago, passwordispassword said:

Install a decent webfilter to block spam. Use a VPN on everything. Require a password to make admin level changes. Require a password for network file sharing between computers

thanks heaps, all of those were there. Spam, never, wouldn't bother without a targetted packet. Administering multiple windows machines with differing levels of control?

[Windows7ge]

1. Only port forward what you have to.
2. Install firewalls
3. Make sure ma & pa don't download anything sketchy like download more RAM for example.
4. vlans/subnets (kind of advanced)

Those are off the top of my head.

[bigmoose]

Thankyou so much all. Were a few things there i didnt even bother with until you brought them up.