How to secure my network in home environment ?

[ZAX0L]

Hello,
The problem lays in my brother two computers. I have few computers on my own on which on one of them I'm doing business with transactions and stuff like that. However I have one network on which all computers are connected and my little donut brother on his two computers has tons of stuff like viruses, malware and who knows what else not mentioning botnets. Simple solutions like Firewall and Anti-Virus software doesn't help as he will click allow or except file anyway :gun:. Believe me I have tried it but nothing seems to work here.

Since I have not a lot to spend, about 20 pounds I was thinking of buying some cheap router, connect it to my combo box router, secure admin panel (192.168.0.1) and make separate network in which he can download all that he wants.

Will that router -> Amazon be enough for my purpose ?

Also should I use openDNS and what is the disadvantages of using it ? Sometimes loading the websites take too long for me but I have decent internet connection.

I was also thinking about hardware firewall but I don't think it will secure my network from all that viruses and also my budget is very low.
How can I secure my network in my home environment ? Any other ideas ?

Every help appreciated.
ZAX0L

 

[Okedokey]

Dont modern OSs do what you're wanting without the hardware?

 

[ZAX0L]

What do you mean ?

 

[beers]

I made a crappy mock-up in paint. To do this with cheap consumer equipment you'd want to end up being behind another layer of PAT (Port Address Translation) so that his PC or devices on that network could not directly connect to yours. The caveat to this approach is that upstream users may be able to capture your data stream to the Internet so you'd want to use SSL or a VPN.

On more enterprise grade gear you would just create another VLAN with an access list on the routed interface denying traffic between the two networks.