Here's the problematic I'm stuck with, in the next months I'm going to move in, in a little house in France. For the network connectivity the house owner decides to buy a single internet connection. So basically the ISP box is shared with 2 others people but is in my house, so if I decide to unplug it, I cut the connection for the others but anyway.
The first thing that comes to mind was that if I can sniff over the network the other can too, I solved the problem for other possible attacks like ARP cache poisoning etc...
So I come with an idea, but I'm not sure about it that's why I post here.
Here, a basic network diagram (PC 1 and PC 2 have only WIFI access since the box is in my house)
Let's see the second diagram :
This is the solution I come with, except if I managed to detect that one PC is in promiscuous mode (with nmap per example), I cannot really prevent the traffic sniffing inside my network.
Theoretically according to the second diagram, my PC sent unencrypted data to the router, the router encrypt them with IPSec or with OpenVPN tunnel then route them to my ISP Box, so if PC 1 or PC 2 sniff on the ISP Box they cannot read the datas since they are encrypted through the router, is that correct ?
Feel free to share with me other solution that could do the thing and correct my English :)