a few wireless network questions

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

I currently have a wired network with 1 PC and 1 laptop. I have a wireless
card for the laptop and am having problems with my router (its old) so I am
thinking of getting a wireless Linksys router. First question is I know
someone outside could access the internet using my connection but can they
access my network? I have both computers running windows firewall and I
believe the Linksys has its own firewall. What other steps should I take to
prevent someone from getting onto my home network? Second are there any
changes I have to make to my network settings when i switch to wireless or
should I just be able to plug and go, (other than running the wireless card's
software). My pc will still be hardwired to the router, both run win xp home.
 
I just noticed ther is a wireless networking forum, could someone please move
this down to that section.
 
I just noticed ther is a wireless networking forum, could someone please move
this down to that section.
Click to expand...

You are right to be concerned, with your wireless LAN. Indeed, all computers -
not just the wireless ones - are vulnerable.

Here's a story about somebody's very stupid wireless neighbor. Don't expect all
wireless neighbors to be this stupid.
<http://www.canoe.ca/NewsStand/LondonFreePress/News/2003/11/22/264890.html>.

The point is, you need to protect a wireless LAN with more precautions than just
the NAT firewall.

Change the router management password, and disable remote (WAN) management.

Enable WEP / WPA. Use non-trivial (non-guessable) values for each. (No "My dog
has fleas").

Enable MAC filtering.

Change the subnet of your LAN - don't use the default. Make the router LAN
address something like 192.168.101.1.

Disable DHCP, and assign an address to each computer manually, like
192.168.101.n (n '= 1).

Install a software firewall on every computer connected to a wireless LAN. Put
manually assigned ip addresses in the Local (highly trusted) Zone. Open file
sharing, only in the Local Zone.

Don't disable SSID broadcast - some configurations require the SSID broadcast.
But change the SSID itself - to something that doesn't identify you, or the
equipment.

Enable the router activity log. Examine it regularly. Know what each
connection listed represents - you? a neighbor?.

Use non-trivial accounts and passwords on every computer connected to a wireless
LAN. Disable or delete Guest userid, if possible (XP Home is a bad choice
here). Rename Administrator, to a non-trivial value, and give it a non-trivial
password. Never use the Administrator renamed account for day to day
activities, only when intentionally doing administrative tasks.

Stay educated - know what the threats are. Newsgroups alt.internet.wireless and
microsoft.public.windows.networking,wireless are good places to start.
 
Thank you Chuck, that was very helpfull. Stories like the link you posted
never fail to make me sick. I found some very helpfull articles at
www.careyholzman.com that talk about the precautions you listed below. I
will have to do a little more thinking before I go wireless.
 
Thank you Chuck, that was very helpfull. Stories like the link you posted
never fail to make me sick. I found some very helpfull articles at
www.careyholzman.com that talk about the precautions you listed below. I
will have to do a little more thinking before I go wireless.
Click to expand...

Very wise. Many folks don'r realise that their wireless neighborhood extends
way beyond their immediate neighborhood.
 
Back
Top