Hello everyone, I have the following problem:
I have 2 computers connected to the same hub.Each of the 2 computers has it's mac adress registered to the server, so each has a certain bandwith for internet assigned. There are about 100 computers which connect to this server and on the internet they share the same ip, but internally they have the same class of routable ip's. I have windows xp on both of them. What I want to do is share files between my 2 computers, but at the same time be able to use the internet, with the 2 different connections that I have. I'm not quite sure if I made myself understood. The connection to the internet is made automaticly, with DHCP. The problem is that if I share a folder normally, everyone on the network can acces it, and I don't want that. If I want to set permissions on a folder, I can only do it for local users. For example, if I would like to let only user x from computer y to acces my folder I cannot, because I would need a domainin order to be able to select that user form the dialog box that appears, and I haven't got one.

Dani AI

Generated

Two practical, low-effort options will solve this without touching the Internet/DHCP side.

First (authentication): as hinted, use Windows authentication + NTFS share permissions. On XP Pro turn off Simple File Sharing (Explorer → Tools → Folder Options → View → uncheck "Use Simple File Sharing"), disable the Guest account, then create a local user account on each machine with the same username/password and give that account explicit NTFS + share permissions on the folder. When you map the share from the other PC choose “connect using a different user name” and supply those credentials. This keeps the share hidden from other users on the hub and avoids a domain.

Second (network-only restriction): whitelist the other machine at the network level so only that computer can reach your SMB ports. Give both PCs stable addresses (DHCP reservation or static IPs), then on each XP machine open Control Panel → Windows Firewall → Exceptions, select File and Printer Sharing and use Change Scope to allow only the other PC’s IP (or add a custom IPsec policy that requires machine authentication/encryption). That way the share can remain simple but only the single peer is allowed to connect. Never open SMB ports (137–139, 445) to the Internet.

Best practice is to combine both: authenticate with a dedicated local account AND restrict access by IP for defense‑in‑depth. Test by pinging the peer and mapping a drive; if mapping fails re-check Simple File Sharing, the Guest account, firewall scope and that both machines actually keep the same IP. If you can’t change firewall/DHCP settings, use an encrypted transfer method instead (FTP/SSH-style tools mentioned by and are valid alternatives).

Recommended Answers

All 3 Replies

Just create local users with the same user/password as the users who are trying to connect.

way is to create FTP servers for file sharing

SSH (SCP, sFTP), password-protected webserver directory, rsync, cvs, stunnel, etc.

If they're Winblows boxen, your best bet might be stunnel.

Be a part of the DaniWeb community

We're a friendly, industry-focused community of developers, IT pros, digital marketers, and technology enthusiasts meeting, networking, learning, and sharing knowledge.