PDA

View Full Version : Stay out of my wireless network



MUSTANGPC
12-11-2004, 10:34 PM
Question:

I am in the process of setting up my wireless network at home. How can I be sure no one taps into it?

Submitted by: Melanie D., Cincinnati, Ohio

Answer:

A wireless network is a particularly good target because it can be accessed without actually invading the property: someone parked out on the street could use your Internet connection or even access shared resources on your computers. You are wise to secure it carefully. There are several steps unique to wireless, plus the usual steps that one should take with any computer that is networked or Internet connected.

Start with the network identification (usually SSID). Each device connected to the wireless network needs the ID, but the device should know the ID, rather than have to retrieve it from the wireless router. Change the default name, encrypt it if your router and wireless devices allow, and turn off the feature that broadcasts the ID.

Next, encrypt the traffic that flows between your computer and the wireless router. This prevents someone gaining access to private information such as accounts, passwords, credit card numbers and the like, simply by 'overhearing' your transmission. Choose a complicated, unguessable encryption string.

Finally, take advantage of log in restrictions if your router supports them. Every network device - not just wireless - is identified by a unique number known as the MAC address or physical address, usually 6 pairs of numerals and letters (actually hexadecimal numbers). Some routers can be set to allow connections only from devices whose MAC addresses are stored in their memory.

As a postscript, be sure when you connect you are connecting to your secured wireless network, not your neighbors which isn't secured. Also, ask the question again in six months because by then there may be new vulnerabilities known and new defenses against them. Don't forget the standard security techniques, virus and spyware protection, plus a firewall that monitors both in- and out-bound traffic.

Good question. Not enough people ask it.

Submitted by: Bob R. of Los Angeles

Merlin
12-13-2004, 04:48 AM
I really need to get around to doing this sometime soon.

mechmike0034
12-13-2004, 04:53 AM
Just doing MAC filtering and/or a passpharse will keep 99 44/00 % of the public out.

I didn't enable WEP on mine as the overhead's a little heavy - slows things down. The router is at the opposite end of the house from one of the connected PCs.

Jeffbx
12-13-2004, 05:12 AM
:stupid:

Unless you think there's a chance that one of your neighbors has a wireless sniffer, I'd say stick with MAC autentication & don't encypt the traffic.

Merlin
12-13-2004, 05:16 AM
I tried that once and the home pc was fine and the Dell Axim was fine but for some reason the laptop just didn't work. I gave up fairly quickly as I had better things to do. Must get back to it sometime soon. I'm sure it is just one setting off or something.

It is actuallt important as I live in an apt complex and there are other wireless networks up and running.

caribiner23
12-13-2004, 06:50 AM
:stupid:

Unless you think there's a chance that one of your neighbors has a wireless sniffer, I'd say stick with MAC autentication & don't encypt the traffic.
:stupid:


I live in a condo, and there are at least two other networks nearby, but I never see anyone else hopping on my network. I use MAC authentication as well.

SmokeyDP
12-13-2004, 08:23 AM
I have a cable modem and my friend would come over with his Dell and get free wireless internet from somewhere. I ended up getting my own wireless and its locked down with WEP and doesn't broadcast the SID.

LivninSC
12-13-2004, 09:10 AM
Can't we all share our networks... :)

Merlin
12-13-2004, 09:33 AM
Can't we all share our networks... :)
You do that. Let someone set up a server with lots of MP3s on it. When RIAA comes looking for someone to sue it will be on your account. That's really the only thing that scares me - someone doing something wrong and the IP address get traced to me.