Your should have completely separate networks for public versus
internal. This will shield you from attempts such as this. Higher end
routers and access points can allow access to separate networks at the
same time and for additional security you can...