I'm not sure why you would want to put the AP in the DMZ of your firewall. Mine is behind the firewall. To be perfectly accurate, my AP and firewall are in the same unit (Linksys firewall/AP/switch), but all wireless (and non-wireless) clients are behind the firewall. This still allows me to put one machine in the DMZ if needed (e.g. playing some networked games). Is this setup not possible with stand-alone APs? Mike -----Original Message----- From: tclug-list-bounces at mn-linux.org [mailto:tclug-list-bounces at mn-linux.org] On Behalf Of The Wandering Dru Sent: Monday, December 29, 2003 12:38 PM To: TCLUG Mailing List Subject: [TCLUG] Wi-Fi security question My mom is looking to go the wireless route in the near future for her laptop. I know a lot of you that use wireless put the AP on the DMZ of your firewall. My question is this, do you pinhole the firewall to allow certain services(ie, filesharing, printing, etc.) back into the LAN or do you just limit the AP to internet access? Or is there some other fancy way to allow these services that I'm not aware of? I'm mostly just looking for a security/convenience trade-off comparison. I have nearly no expereince with wireless and would like to come up with a plan/cost before I go buying stuff willy-nilly on my mom's bill. -- The Wandering Dru <dru at druswanderings.net> http://druswanderings.net <--- Things 'n' Such Get nifty TCLUG merchandise at the TCLUG Store! http://www.cafeshops.com/tclug _______________________________________________ TCLUG Mailing List - Minneapolis/St. Paul, Minnesota http://www.mn-linux.org tclug-list at mn-linux.org https://mailman.real-time.com/mailman/listinfo/tclug-list