Talk about paranoid? Do you actually think there is someone living in your neighborhood possesing the knowledge to get inside your system? Not to mention, having the equipment it takes to get inside via wireless? Besides, what do you have on your network that anyone would want, or would want to maliciously tamper with? I understand that security is extremely important, but the whole idea of someone going thru the extreme amount of trouble just so they can they can look at your p0rn and w@rez collection is highly unlikely. Now I would feel differently if this was pertaining to a multi-million dollar company, dozens of employees, and 300 gigs worth of private documents....But sometimes people let security get in the way of actually learning about and having fun with having a 'home' network.
 
Are all of your clients grabbing IP's via the DHCP in your PDC? If I am correct, and if you're using 2 network cards, you could set up 2 DHCP servers on your PDC and setup the second server to only spit-out 1 IP address thru the card that goes to your WAP11. And on that second DHCP server, just setup that 1 IP to be reserved for the mac address of your laptop. That way, your laptop will still be able to grab all of the resources from the server(WINS, DNS, etc...), and be on its own 'filtered' seperate network. Now I have no idea if it will work, or if it's even possible, but it's worth mentioning none-the-less.