Securing WiFi...

StephenRyan

I've got a new Wireless access point in my house.

How much security do I need? I have it running 128bit WEP. Is that enough?

Should I set up WPA? Firewalls? Or is what I have good enough?

secret_squirrel

Change default userid and password of router.
Stop SSID Broadcast
Use WPA not WEP if your wireless adapter supports it.
Enable MAC address filtering. (Limit it to the MAC addresses of your PC's)
Make sure any built in firewalls are on.

StephenRyan

Is all that really necessary?

As for the built in firewall, I read somewhere that thats only useful if you're using the access point as a router to route an internet connection, which i'm not. Is that true?

digiking

Just make sure you change user name and password of access point...Have a wep keys that is not the same numbers over and over again 2232223222321, or something you should be find, Also if you want set the ssid or ap name to your email address. so if anyone wants access they can emal you

Enjoy

secret_squirrel

StephenRyan wrote:

Is all that really necessary?

As for the built in firewall, I read somewhere that thats only useful if you're using the access point as a router to route an internet connection, which i'm not. Is that true?

Err..I would say so. Its completely up to you though. I would say your chances of getting hacked are fairly to very low but it will take you about 10 mins to do. How would you like to find out one day that your PC has been used as a Spam relay or to host kiddy porn?

You must have read rubbish - a firewall is the first and best line of defence against some trojans. Switch it on and install a software based one on your PC such as kerio or zonealarm.

StephenRyan

secret_squirrel wrote:

Err..I would say so. Its completely up to you though. I would say your chances of getting hacked are fairly to very low but it will take you about 10 mins to do. How would you like to find out one day that your PC has been used as a Spam relay or to host kiddy porn?

You must have read rubbish - a firewall is the first and best line of defence against some trojans. Switch it on and install a software based one on your PC such as kerio or zonealarm.

Secret Squirrel, I realise a firewall is whats needed when protecting against hackers from the internet. Is it worthwhile for securing my WiFi access point against my neighbours though?

secret_squirrel

StephenRyan wrote:

Secret Squirrel, I realise a firewall is whats needed when protecting against hackers from the internet. Is it worthwhile for securing my WiFi access point against my neighbours though?

Depends on your evaluation of your neighbours. I would definately make sure the admin password is changed - since the defaults are listed on the internet and it would be a breeze for even the neighbour with the most basic tech skills to deny you access to your own router.

Secondly whilst most of us might not mind our neighbour sharing our link to check the odd email bear in mind that if they have access to your network - it can be fairly simple to access your hard drive if your copy of windows is not properly secure.. It certainly means that it would be very easy to catch a virus from them.

Also I assume your internet connection is capped? How would you like it if your neighbour downloaded several gigs of movies and earned you a huge bill from your isp ?

StephenRyan

Ok.. I was uner the (obviously mistaken) impression that Firewalls protected your computer from the internet only, and not from your own network... At the moment my internet connection isn't shared at all, WiFi is just used for file and printer sharing.

One final clarification. I'm using 128-bit WEP with a randomly generated 26 digit hexadecimal key. Is WPA worth the hassle? Why is WEP not considered secure enough?

secret_squirrel

StephenRyan wrote:

Ok.. I was uner the (obviously mistaken) impression that Firewalls protected your computer from the internet only, and not from your own network... At the moment my internet connection isn't shared at all, WiFi is just used for file and printer sharing.

A firewall will protect whatever is 'behind' it. In the case of a router - its your entire local network. In the case of a software firewall on your pc it will protect just that pc.

One of the major virus/trojan outbreaks was completely preventable by a firewall (think it was sasser).

Its always good to have defence in depth - thats why I run a firewalled router and zonealarm on each of my pc's.

StephenRyan wrote:

One final clarification. I'm using 128-bit WEP with a randomly generated 26 digit hexadecimal key. Is WPA worth the hassle? Why is WEP not considered secure enough?

Im not sure of the technical details - there is a good write up on hacking WEP on Anandtech.com.
WAP was mostly invented to give Corporates confidence in using WiFi for their networks - after the flaws in WEP became known.

snappieT

Average time to hack 128bit WEP is 8 hours.
You do need linux though...

Mac daddy

snappieT wrote:

Average time to hack 128bit WEP is 8 hours.
You do need linux though...

I have the same setup as secret squirrel -

Two laptops - one desktop

all have zone alarm pro -

also using routers firewall

Laptops using Wpa

Two laptops one sniffin packetts and the other capturing packetts using airo can be done in about 25 minutes - IF there is enough traffic generated

Stokolan

I dont know much about wireless security but i happened apon this vid

LINKY

shows a wireless network hacked in 10min, tought it might help ya decide

Sleipnir

Mac daddy wrote:

I have the same setup as secret squirrel -

Two laptops - one desktop

all have zone alarm pro -

also using routers firewall

Laptops using Wpa

Two laptops one sniffin packetts and the other capturing packetts using airo can be done in about 25 minutes - IF there is enough traffic generated

And if you could really be ars*d hacking a home users network to, oh I don't know, maliciously print something?

OP - If you have WEP on, not broadcasting SSID and even the XP software firewall (plus AV of course) then it's enough.
MAC filtering if you really feel the need but it's very easy to clone one.

Not enough for a determined hacker to defeat but you'll find that determined and experienced hackers have better thing to do then run up a home user's download limit or look at pictures of you in Ibiza last year.

Personlly, I have a Nokia appliance firewall in front of my wireless router plus the usual behind it.

cianr

Stokolan,

Very interesting video there!