WEP sufficient if I restrict MAC Addresses??

maximus02

Hi.
I'd appreciate assistance here.

I use a home WiFi network. Unfortunately 2 of the devices (media players) I use only allow WEP security when using wirelessly. I know WEP is actually not very good security.

To overcome this I have set the router to restrict access to only particular devices using their MAC address.

I just wonder is this sufficient? Can I feel safe that no one can access my network wirelessly outside these MAC addresses?

Thanks for help.

woolymammoth

maximus02 wrote: »

Can I feel safe that no one can access my network wirelessly outside these MAC addresses?

sorry, but no!

WEP is not just not very good, it's rubbish! You see, once the encryption is broken, enough data can be got to spoof the MAC address, so any intruder can literally pretend to be any device you have plugged into your network. MAC filtering will act as a deterrant against some kid who isn't pushed, but if someone really wants to break in, they will.

JustAddWater

To further restrict this, if WEP is your only option, you can disable SSID broadcast and configure your other devices to connect to the SSID even if not broadcasting

Not sure if all of your devices would support it but certainly a PC running windows XP upwards does (not sure about phones and MAC's)

Again it's not great but everything you can do would be better than nothing!

woolymammoth

JustAddWater wrote: »

Again it's not great but everything you can do would be better than nothing!

The anything is better than nothing argument only gives a false sense of security. The fact is, Someone who knows how to scan data, crack WEP, and spoof addresses, will not be scanning for wireless networks using just Windows networking! Not trying to scaremonger, but just know the reality and the limitations of what you're using. If you're seriously concerned about the security of your wireless network, just don't use WEP.

maximus02

Thanks for replies.

I wouldn't say I am 'seriously' concerned about my security and I certainly can't afford to replace my WEP devices right now. So I shall investigate further.

In the meantime is it possible to get software (XP) which can detect and show me list of any devices which are attempting to access my router?

Thanks

28064212

WEP with MAC address filtering is the equivalent of locking the front door and windows of your house, but leaving the back door wide open. Sure it might stop the casual person walking by who randomly tries the handle, but anyone who actually wants to get in will, at a minimum, try all the doors

Capt'n Midnight

JustAddWater wrote: »

To further restrict this, if WEP is your only option, you can disable SSID broadcast and configure your other devices to connect to the SSID even if not broadcasting

Not sure if all of your devices would support it but certainly a PC running windows XP upwards does (not sure about phones and MAC's)

Again it's not great but everything you can do would be better than nothing!

Kismet will still pick up the SSID from the packets - it's been around for ages


netstumbler doesn't see AP's with disabled SSID's unless they respond to probe requests which many do


Bit problem with hiding the SSID is that the neighbours may not realise that you are on the same channel they are on and so both of you interfere with each other.




Changing the MAC is a one liner in Windows and Linux once you have the see the valid addresses with your scanner

http://www.windowsreference.com/networking/how-to-change-mac-address-in-windows-registry/ = the key to add to change MAC in windows , to do from the command line you use reg.exe

with linux sudo ifconfig eth1 hw ether 00:00:00:00:00:01

Jonathan

Set up two SSIDs and put the WEP network onto a different subnet.

Capt'n Midnight

maximus02 wrote: »

Thanks for replies.

I wouldn't say I am 'seriously' concerned about my security and I certainly can't afford to replace my WEP devices right now. So I shall investigate further.

In the meantime is it possible to get software (XP) which can detect and show me list of any devices which are attempting to access my router?

Thanks

you could setup wireshark on the wirless card to sniff out traffic but an automated intrusion detection system is a bit beyond XP since anyone connecting will be spoofing existing MAC's


Using WEP on a second network on the WAN side of the WPA router isn't such a bad idea. Also scan your neighbours to see if there is any lower hanging fruit to take the pressure off you