Internet Cafe

Our office allows wireless access to the internet for visiting clients. This
week one of the clients came in with a virus that sent out huge amounts of
junk mail from his laptop, the sheer volume crippled everybodys access to
email and the internet.

It took me ages to identify the cause of the problem.

1) How do I prevent a reocurrence? Internet cafes manage this problem somehow.
2) We presently have 30 computers hooked up to our Windows 2003 Server box,
but the company is rapidly expanding, and that number will be 100+ within the
next 6 months. I've no training as a sytem administrator, although I've been
landed with the job. Which forums/text books will best equip me for what I
have to do?
--
Thanks for any help you can offer,

Ian Sweeney

Jabez
Fri Dec 07 19:10:47 PST 2007

Hey ian,

You can limit the bandwidth for each user if you have ISA Server deployed.

Read: http://www.isaserver.org/software/ISA/Bandwidth-Control/

--
Jabez Gan
Microsoft MVP: Windows Server - File Storage
"Ian Sweeney" <IanSweeney@discussions.microsoft.com> wrote in message
news:214375E7-2166-4C19-8B79-DE95AB11313A@microsoft.com...
> Our office allows wireless access to the internet for visiting clients.
> This
> week one of the clients came in with a virus that sent out huge amounts of
> junk mail from his laptop, the sheer volume crippled everybodys access to
> email and the internet.
>
> It took me ages to identify the cause of the problem.
>
> 1) How do I prevent a reocurrence? Internet cafes manage this problem
> somehow.
> 2) We presently have 30 computers hooked up to our Windows 2003 Server
> box,
> but the company is rapidly expanding, and that number will be 100+ within
> the
> next 6 months. I've no training as a sytem administrator, although I've
> been
> landed with the job. Which forums/text books will best equip me for what I
> have to do?
> --
> Thanks for any help you can offer,
>
> Ian Sweeney
>

Pegasus
Sat Dec 08 01:42:39 PST 2007


"Ian Sweeney" <IanSweeney@discussions.microsoft.com> wrote in message
news:214375E7-2166-4C19-8B79-DE95AB11313A@microsoft.com...
> Our office allows wireless access to the internet for visiting clients.
> This
> week one of the clients came in with a virus that sent out huge amounts of
> junk mail from his laptop, the sheer volume crippled everybodys access to
> email and the internet.
>
> It took me ages to identify the cause of the problem.
>
> 1) How do I prevent a reocurrence? Internet cafes manage this problem
> somehow.
> 2) We presently have 30 computers hooked up to our Windows 2003 Server
> box,
> but the company is rapidly expanding, and that number will be 100+ within
> the
> next 6 months. I've no training as a sytem administrator, although I've
> been
> landed with the job. Which forums/text books will best equip me for what I
> have to do?
> --
> Thanks for any help you can offer,
>
> Ian Sweeney
>

You can install a firewall and create a rule that allows traffic
on port 25 only to be sent to the IP address of your ISP's
SMTP server. Keep this address to yourself!

Lanwench
Sun Dec 09 07:51:20 PST 2007

Ian Sweeney <IanSweeney@discussions.microsoft.com> wrote:
> Our office allows wireless access to the internet for visiting
> clients. This week one of the clients came in with a virus that sent
> out huge amounts of junk mail from his laptop, the sheer volume
> crippled everybodys access to email and the internet.
>
> It took me ages to identify the cause of the problem.
>
> 1) How do I prevent a reocurrence? Internet cafes manage this problem
> somehow. 2) We presently have 30 computers hooked up to our Windows
> 2003 Server box, but the company is rapidly expanding, and that
> number will be 100+ within the next 6 months. I've no training as a
> sytem administrator, although I've been landed with the job. Which
> forums/text books will best equip me for what I have to do?

Your management was just begging for trouble with this configuration. What
you need to do is set up a segregated wireless LAN for guests, and do not
allow any connectivity between that WLAN and your own network. All your
guests should be able to access is the Internet. Your own WLAN should be
protected using WPA at minimum.

I don't know of any textbooks/links/whatnot, but this is a pretty
basic/simple network config. If you have more than one public IP, it's
easier....although you could do this with only one. You might check out the
line of Sonicwall firewalls with wireless - they create an entire segregated
subnet for WLAN traffic.

For your next steps, I suggest you post in microsoft.public.security
....with a crosspost to microsoft.public.windows.networking.wireless, for
more expert help, as this is a Windows Server group and not the best one for
your issue.

Good luck!