Wireless Security

ChefPiper · 01-22-2006, 07:35 AM

I have a laptop that is wireless and I was wondering is there any thing I can do to prevent others from "reading "me when I am online in a hotel room or even at home here.Thanks

**dj913** · 01-22-2006, 11:07 AM

Well, when your are out at a hotel, it is a very good idea to have a firewall. This doesnt prevent others from reading what you SUBMIT (not to be confused with what you type), one of the big reasons is that hotels use Hubs instead of Switches becuase they are cheaper. The only way to prevent others from seeing what you submit is to either connect to a encrypted site (your browser will show the lock symbol) or to connect back home to a router that has VPN. Most older routers dont have this. If you dont connect to a secure connection and create a tunnel and the hotel is using a Hub then you are sending all of your passwords out into the open, including e-mail passwords etc. However, some providers do allow you use secure, encrypted e-mail.

To protect yourself at home from people listening to your traffic is to turn on encryption. WPA encryption is the best (with a strong self made key with symbols and all sorts of different case letters and numbers) and second best is WEP encryption (128bit strongest, 64bit weakest). Dont bother using MAC filtering or turning of the SSID, this does nothing for your security.

newhouse1390 · 01-27-2006, 07:32 AM

I think MAC filtering is another way for you to better secure you WI-FI system. IT keeps specific devices out. Am I wrong?

**johnwill** · 01-27-2006, 01:06 PM

MAC filtering is one of the weakest measures you can take, and not worth the time to deal with it. It usually ends up making it harder for you to use your network, it doesn't really stop a hacker with any knowledge.

At home, I'd get encryption working, WPA if your equipment supports it, WEP if that's the best you have.

On the road, other than a firewall, you don't have much protection, since you aren't determining the level of protection. I use wired connections whenever possible on the road, and I don't do stuff that I wouldn't want someone else to see. Note that secure sites should protect you, since the data is encrypted from your machine to the destination.

Michael Roder · 02-18-2006, 03:23 PM

Why is MAC filtering weak? I assume that they can spoof an address, but would it be hard to guess it?

**Squashman** · 02-18-2006, 07:43 PM

If you are in the California area you can use Googles Wireless VPN client but for everything else just use iPig.
http://www.iopus.com/ipig/

**johnwill** · 02-19-2006, 10:40 AM

I'll let someone else explain some of the weaker aspects of securing your wireless LAN.

http://blogs.zdnet.com/Ou/index.php?p=43

newhouse1390 · 02-20-2006, 10:03 AM

So now that you have elimnated nearly all of the security settings on my Wireless router, what do you suggest I use to protect my Wireless Network?

**johnwill** · 02-20-2006, 11:57 AM

A better router.

newhouse1390 · 02-20-2006, 04:34 PM

Quote:

A better router.

If you don't mind me asking what kind of Wireless Router do you have? Would you want to use the WPA? or RADIUS?

**johnwill** · 02-21-2006, 11:49 AM

I have an aging D-Link DI-614+, and an SMC 2804WBR. Both support WPA-PSK, and that's what I use. I also have a couple of other newer routers in the closet, and I'm going to install one of those to upgrade my D-Link one of these days, I'd like the faster 802.11g speeds for the laptop.

01-22-2006, 07:35 AM	#1 (permalink)
ChefPiper Registered User Join Date: Jan 2006 Posts: 1 OS: xp	Wireless Security I have a laptop that is wireless and I was wondering is there any thing I can do to prevent others from "reading "me when I am online in a hotel room or even at home here.Thanks

01-27-2006, 01:06 PM	#4 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,748 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	MAC filtering is one of the weakest measures you can take, and not worth the time to deal with it. It usually ends up making it harder for you to use your network, it doesn't really stop a hacker with any knowledge. At home, I'd get encryption working, WPA if your equipment supports it, WEP if that's the best you have. On the road, other than a firewall, you don't have much protection, since you aren't determining the level of protection. I use wired connections whenever possible on the road, and I don't do stuff that I wouldn't want someone else to see. Note that secure sites should protect you, since the data is encrypted from your machine to the destination. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

02-18-2006, 03:23 PM	#5 (permalink)
Michael Roder Registered User Join Date: Nov 2004 Posts: 2 OS: WinXP	MAC filtering Why is MAC filtering weak? I assume that they can spoof an address, but would it be hard to guess it?

02-19-2006, 10:40 AM	#7 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,748 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	I'll let someone else explain some of the weaker aspects of securing your wireless LAN. http://blogs.zdnet.com/Ou/index.php?p=43 __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

02-20-2006, 11:57 AM	#9 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,748 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	A better router. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience

01-22-2006, 11:07 AM	#2 (permalink)
dj913 TSF Enthusiast Join Date: Jan 2005 Location: MA Posts: 613 OS: WinXP Home Primarily	Well, when your are out at a hotel, it is a very good idea to have a firewall. This doesnt prevent others from reading what you SUBMIT (not to be confused with what you type), one of the big reasons is that hotels use Hubs instead of Switches becuase they are cheaper. The only way to prevent others from seeing what you submit is to either connect to a encrypted site (your browser will show the lock symbol) or to connect back home to a router that has VPN. Most older routers dont have this. If you dont connect to a secure connection and create a tunnel and the hotel is using a Hub then you are sending all of your passwords out into the open, including e-mail passwords etc. However, some providers do allow you use secure, encrypted e-mail. To protect yourself at home from people listening to your traffic is to turn on encryption. WPA encryption is the best (with a strong self made key with symbols and all sorts of different case letters and numbers) and second best is WEP encryption (128bit strongest, 64bit weakest). Dont bother using MAC filtering or turning of the SSID, this does nothing for your security.

01-27-2006, 07:32 AM	#3 (permalink)
newhouse1390 Member, Networking Team Join Date: Jan 2005 Location: Ohio Posts: 1,040 OS: Windows Server 2003	I think MAC filtering is another way for you to better secure you WI-FI system. IT keeps specific devices out. Am I wrong?

02-18-2006, 07:43 PM	#6 (permalink)
Squashman Tech, Networking Forums Join Date: Apr 2005 Location: 1265 Lombardi Ave. Posts: 1,146 OS: All of the above	If you are in the California area you can use Googles Wireless VPN client but for everything else just use iPig. http://www.iopus.com/ipig/

02-20-2006, 10:03 AM	#8 (permalink)
newhouse1390 Member, Networking Team Join Date: Jan 2005 Location: Ohio Posts: 1,040 OS: Windows Server 2003	So now that you have elimnated nearly all of the security settings on my Wireless router, what do you suggest I use to protect my Wireless Network?

02-21-2006, 11:49 AM	#11 (permalink)
johnwill Manager, Networking Forums Join Date: Sep 2002 Location: S.E. Pennsylvania, US Posts: 41,748 OS: Windows 7, XP-Pro, Vista, Linux Blog Entries: 1	I have an aging D-Link DI-614+, and an SMC 2804WBR. Both support WPA-PSK, and that's what I use. I also have a couple of other newer routers in the closet, and I'm going to install one of those to upgrade my D-Link one of these days, I'd like the faster 802.11g speeds for the laptop. __________________ If TSF has helped you, Tell us about it! or Donate to help keep the site up! Microsoft MVP - Windows Desktop Experience