Help - Search - Members - Calendar
Full Version: Wireless Network Security
Mobile Electronics Australia > Off Topic / Other Discussion > Tech Heads Corner
mad89
hey guys, ive just setup a wireless network at home with a Netgear DG834G modem/router to share my ADSL connection...

how can i 'secure' it so no-one can try to leech off it from across the road or something (ive heard of this happening, not sure if its tru)

also, for virus protection aswell.. i have bit defender professional running which is a virus protection/firewall... but not sure about all the settings etc...


basically, how can i protect ALL aspects of the network...

any settings to look for/change? applications to use? i got no idea tongue.gif

thanks for any help

cheers
- mad89

smile.gif
ReMiX
In the router setup, Turn off SSID broadcast (This stops the unit from broadcasting its name/ID, so it wont come up as a 'found network' when someone searches for any available networks) and setup a WEP key to encript the data .. With this key, when you attempt to connect to the network it will prompt you for the WEP key (similar to a password, 64bit is 10 digit and wont communicate with the network unless the key has been entered)

There are other things, But i'm tired and going to bed.. If someone hasnt already covered them by tomorrow night I'll list some other things.


smile.gif
Sigmeister
Most of the wireless modems I have worked with also have a MAC address filter. So you can specify which MAC addresses can come through. Turn this on (If it's available) and just add the MAC addresses of your PC's.
Liquidity
WEP, disabling SSID, and mac address filtering, will NOT stop anyone who's out to leech of your network for more than about 30 seconds.

If your router has it. use WPA-PSK encyption. WPA-Pre-shared-key.

You choose a password (combination of letters/numbers) and enter it into the router, then go and enter it in each computer when it tries to connect to the network (only need to do it once).

This will stop people from accessing your network. WEP will not.

Disadvantages
1- Shorter range. Any form of encyption will decrease range.
2- Shorter battery life, from laptops.
Pulse-R
easy - turn off the router when you're not using it.
mad89
QUOTE
In the router setup, Turn off SSID broadcast (This stops the unit from broadcasting its name/ID, so it wont come up as a 'found network' when someone searches for any available networks) and setup a WEP key to encript the data .. With this key, when you attempt to connect to the network it will prompt you for the WEP key (similar to a password, 64bit is 10 digit and wont communicate with the network unless the key has been entered)


just turned SSID off (now does this mean that wen i turn my comp on that it wont connect automatically or?)
i also have a 128bit WEP key, which i set up wen installing the router...

QUOTE
Most of the wireless modems I have worked with also have a MAC address filter. So you can specify which MAC addresses can come through. Turn this on (If it's available) and just add the MAC addresses of your PC's.


any more details about this? i didnt see it anywhere?

QUOTE
If your router has it. use WPA-PSK encyption. WPA-Pre-shared-key.


yeh it has that, wen i was setting up the router it gave me the option, but i wasnt sure, so i went with the default which was WEP and 128bit key... any more info on this please? wots the difference? is it similar to setup?
since the wireless is for the laptop, if it shortens battery life then it may be no good? tell me details anyways, so ill try it and see... smile.gif

thanks alot, anything else?

- mad89

smile.gif
Selfdestruktor
WEP can be cracked in 3 mins with easy to use and freely available tools from the 'net with one decent powered PC and someone with a little bit of knowledge
WPA-PSK with a random alpha-numeric key of only 7 characters (like q7rl93u) under the same conditions will withstand 10+ years.

THAT's the difference tongue.gif
mad89
ok... disabled SSID, and ive changed my WEP key to a WPA-PSK...

anything else i can do? is there any programs or anything that will secure me more...?

- mad89
Liquidity
Theres no such thing as secure, just difficult.
wpa-psk, mac address filtering, SSID off, is the best your going to get for home use, and its probably MORE than adequate.
mad89
thanks guys...

QUOTE
wpa-psk, mac address filtering, SSID off, is the best your going to get for home use


got 2 out of 3 on that one...

can someone tell me more about mac address filtering, i dont think i saw anything about it in the router setup (which i can access at any time...)

is there another name for it or something?

wot does it do, etc...

thanks again...

- mad89

smile.gif
Selfdestruktor
Personally I don't bother, at home, at work or anywhere else i've installed wireless gear, if WPA is already in place.
MAC address spoofing is so damn easy that it's not worth the effort.
mad89
LOL... oright thanks anyways

smile.gif

- mad89
Liquidity
just so you know, each and every network device made has a "hard wired" code. Its supposed to be unique.

Mac. Media access control.

Its used to identify your computer on a network. Routers etc use it in various ways.

If you had 50 identical network cards from the same manufacturer, each one would (supposedly) have a different MAC. Doesnt always happen though (read, the really cheap bastards).

however nowadays, a lot of cards come out with the option to change the m.a.c on the fly...hence all someone needs to do is sniff out what macs are your network, and type it into their card.
Stooge007
does unplugging your wireless router when not in use avoid all these problems???

- Stooge007 out
Pulse-R
That's what I said in post #5
mad89
QUOTE
does unplugging your wireless router when not in use avoid all these problems???


yes, but these security measures are for when the router is in use?

smile.gif

- mad89
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2009 Invision Power Services, Inc.
 Runescape