Quote:
|
Originally Posted by xepherys
Okay, first of all, ZoneAlarm isn't overkill... it's more likley to be underkill, except for the aforementioned aspect that software firewalls can help prevent the phoning home issues with bots and various trojans.
As for NAT, NAT is NOT a security solution, nor was it ever intended to be. NAT is for putting many private IP addresses behind a single public IP address. This inherently offers SOME security against basic attacks, but it is NOT a security solution (just in case you missed it the first time).
|
Would you please take the time to explain why NAT is bad? I’ve spent a bit on Google and I can’t find any problems with it security wise. It stops the outside world from getting in unless the inside asked for it.
Quote:
|
Originally Posted by xepherys
a) disable SSID broadcast
|
Disabling the SSID broadcast is worthless, it is still contained in every packet going to and from the access point, if some one wants to get your SSID, a little sniffing and they have it. Please make sure you change the SSID from the multiple networks with the same SSID.
Quote:
|
Originally Posted by xepherys
b) Use at least 128-bit WEP (though it's still very weak to basic cracks) or WPA.
|
WEP is technically worthless, however it’s better than nothing, it will stop the casual observer; however it is breakable in less than 10 minutes. Use WPA if you can.
Quote:
|
Originally Posted by xepherys
c) Change the admin username and password.
|
xepherys is right on the money with changing the password. I lost count of the routers I’ve had to reset because the owner did not change the password and someone hijacked it.
Quote:
|
Originally Posted by xepherys
d) For home usage, use MAC filtering to allow only known computers to attach.
|
Just with the SSID MAC filtering is worthless, a few seconds of sniffing, you can change your MAC to an acceptable MAC, its more hassle than its worth.
Quote:
|
Originally Posted by xepherys
e) Use fixed DHCP to assign addresses. Combined with 'd' it's just an added layer of security to prevent people from using your internet illegally and/or browsing your internal network.
|
And don’t worry about the DHCP, as with most things mentioned; a few minutes of sniffing can let you make your own IP configurations.