So, as I said in a previous thread, I installed Debian 3.1 on my laptop. I've set up filesharing to my liking and have gotten the wireless to work. Now I want to secure the network.
My router is a Linksys WRT54G, and it does all the work. The two desktops are wired into it, and currently B-spec is the only wireless enabled. There is no encryption enabled (as I understand it, WEP kinda sucks anyway). The router has a MAC filter and whitelist, so that it only allows those MAC addresses on the whitelist to connect to the network. As it stands, the only MAC address on the list right now is that of my laptop's PCMCIA wireless card.
Everything works right now, so I'm almost content to leave things be. I know, however, that anyone in my apartment building with a packet sniffer can pick up my wireless transmissions. I have little reason to be concerned (it's not as if I've broadcasting sensitive material), but I'd like to know what my options are.
In summation, I seek opinions on the following:
Is the router's firewall/WAN blocker, coupled with the MAC wireless filter, enough to keep most people out of my home network, or should I be looking into additional firewalls for my desktops/laptop?
What kind of encryption protocol (if any) should I be using to secure wireless broadcasting? Are there specific things I have to do because I'm running Debian?
And, most importantly: do these pants make my butt look big?
Securing my home network
Moderator: Thanas
- Alferd Packer
- Sith Marauder
- Posts: 3706
- Joined: 2002-07-19 09:22pm
- Location: Slumgullion Pass
- Contact:
Securing my home network
"There is a principle which is a bar against all information, which is proof against all arguments and which cannot fail to keep a man in everlasting ignorance--that principle is contempt prior to investigation." -Herbert Spencer
"Against stupidity the gods themselves contend in vain." - Schiller, Die Jungfrau von Orleans, III vi.
"Against stupidity the gods themselves contend in vain." - Schiller, Die Jungfrau von Orleans, III vi.
- Faram
- Bastard Operator from Hell
- Posts: 5271
- Joined: 2002-07-04 07:39am
- Location: Fighting Polarbears
MAC filtering is absolutly useless and only give you a false sense of security!
WEP is much better than MAC filtering! Enable WEP or WPA if the router has it.
WEP is much better than MAC filtering! Enable WEP or WPA if the router has it.
[img=right]http://hem.bredband.net/b217293/warsaban.gif[/img]
"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus
Fear is the mother of all gods.
Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
"Either God wants to abolish evil, and cannot; or he can, but does not want to. ... If he wants to, but cannot, he is impotent. If he can, but does not want to, he is wicked. ... If, as they say, God can abolish evil, and God really wants to do it, why is there evil in the world?" -Epicurus
Fear is the mother of all gods.
Nature does all things spontaneously, by herself, without the meddling of the gods. -Lucretius
- Chmee
- Sith Marauder
- Posts: 4449
- Joined: 2004-12-23 03:29pm
- Location: Seattle - we already buried Hendrix ... Kurt who?
Re: Securing my home network
Enough to keep most people out, but not a minimally qualified hacker.Alferd Packer wrote: Is the router's firewall/WAN blocker, coupled with the MAC wireless filter, enough to keep most people out of my home network, or should I be looking into additional firewalls for my desktops/laptop?
If you really wanted to secure the wireless you'll put everything on 802.11g and use WPA-PSK encryption with TKIP, built into (g).Alferd Packer wrote: What kind of encryption protocol (if any) should I be using to secure wireless broadcasting? Are there specific things I have to do because I'm running Debian?
[img=right]http://www.tallguyz.com/imagelib/chmeesig.jpg[/img]My guess might be excellent or it might be crummy, but
Mrs. Spade didn't raise any children dippy enough to
make guesses in front of a district attorney,
an assistant district attorney, and a stenographer.
Sam Spade, "The Maltese Falcon"
Operation Freedom Fry
Mrs. Spade didn't raise any children dippy enough to
make guesses in front of a district attorney,
an assistant district attorney, and a stenographer.
Sam Spade, "The Maltese Falcon"
Operation Freedom Fry
- Alferd Packer
- Sith Marauder
- Posts: 3706
- Joined: 2002-07-19 09:22pm
- Location: Slumgullion Pass
- Contact:
Thanks for the advice.
In my neverending quest to do things in the most ass-backward, complicated manner, I nixed debian and put Mandriva 10.2 LE on the laptop. I'm encountering the same difficulty I had with debian, that is: the wireless card works picture perfectly when encryption is disabled. It fails, however, when I try WEP 64 bit, WEP 128 bit, and WPA-PSK with TKIP. This would suggest to me that the problem does not lie in the driver, but rather in the wireless configuration. I am, however, stumped. So, if anyone's familiar with the ins and outs of Mandrake, any pointers would be appreciated and will be awarded with appropriate amounts of porn.
In my neverending quest to do things in the most ass-backward, complicated manner, I nixed debian and put Mandriva 10.2 LE on the laptop. I'm encountering the same difficulty I had with debian, that is: the wireless card works picture perfectly when encryption is disabled. It fails, however, when I try WEP 64 bit, WEP 128 bit, and WPA-PSK with TKIP. This would suggest to me that the problem does not lie in the driver, but rather in the wireless configuration. I am, however, stumped. So, if anyone's familiar with the ins and outs of Mandrake, any pointers would be appreciated and will be awarded with appropriate amounts of porn.
"There is a principle which is a bar against all information, which is proof against all arguments and which cannot fail to keep a man in everlasting ignorance--that principle is contempt prior to investigation." -Herbert Spencer
"Against stupidity the gods themselves contend in vain." - Schiller, Die Jungfrau von Orleans, III vi.
"Against stupidity the gods themselves contend in vain." - Schiller, Die Jungfrau von Orleans, III vi.