Computer Talk Discussions here pertain to mods, troubleshooting, and PC/console gaming

"Secure" wireless B/G. Recommendations...

Thread Tools
 
Search this Thread
 
Old 07-26-2004, 01:26 PM
  #1  
Registered User
Thread Starter
 
Cebby's Avatar
 
Join Date: Sep 2002
Location: Pittsburgh, PA
Posts: 11,199
Likes: 0
Received 1 Like on 1 Post
"Secure" wireless B/G. Recommendations...

I recently got a new laptop that has an integrated "G" card. My iPaq has an integrated "B" card. Both have bluetooth too if that matters. Everything else is wired (two PC's currently, but the whole house is wired).

I am currently using a Linksys router for the wired stuff, but sold off my wireless access point a while back. I have no problem parting with it if it doesn't fit in the mix.

I think I'd prefer a wireless router that includes a few ports that I can add switches to expand wired capacity. What about some sort of firewall?

Some of the newer Netgear stuff looks promising... Any recommendations?
Old 07-26-2004, 02:05 PM
  #2  
Contributing Member
 
JoKEpLaYeR's Avatar
 
Join Date: Jan 2004
Location: Pleasant Hill, CA
Posts: 880
Likes: 0
Received 0 Likes on 0 Posts
You can always just add a Wireless Access Point to the router you already have - but prices have come down so far that you might be better off just getting a complete "package" with a new Wireless Router. I love the Linksys stuff! If you want a really good firewall/router/wireless access point check out www.SonicWall.com. They're expensive though.
Old 07-26-2004, 02:32 PM
  #3  
Registered User
 
midiwall's Avatar
 
Join Date: Dec 2002
Location: Seattleish, WA
Posts: 9,048
Likes: 0
Received 2 Likes on 2 Posts
Linksys rocks and is my first choice in thise stuff. I've had good luck with Netgear as well, but I've been "brand aligned" with Linksys for years.

This is Linksys's classic 4 port 802.11B router with firewall (BEFW11S4); HIGHLY recommended:
http://www.buy.com/prod/Linksys_Wire.../10273558.html

This is the "G" version of that, and with the $10 rebate is a HECK of a deal:
http://www.buy.com/prod/Linksys_WRT5.../10360624.html


Hard to beat the free shipping (and of course, no tax) offer from Buy.com as well.
Old 07-26-2004, 02:33 PM
  #4  
Registered User
Thread Starter
 
Cebby's Avatar
 
Join Date: Sep 2002
Location: Pittsburgh, PA
Posts: 11,199
Likes: 0
Received 1 Like on 1 Post
That looks like great stuff, but is a bit beyond what I want to spend currently. Of the stuff that is inexpensive, is there one clearcut leader in the bang for the buck category?
Old 07-26-2004, 02:34 PM
  #5  
Contributing Member
 
JoKEpLaYeR's Avatar
 
Join Date: Jan 2004
Location: Pleasant Hill, CA
Posts: 880
Likes: 0
Received 0 Likes on 0 Posts
Go with Linksys.
Old 07-26-2004, 04:00 PM
  #6  
Registered User
 
midiwall's Avatar
 
Join Date: Dec 2002
Location: Seattleish, WA
Posts: 9,048
Likes: 0
Received 2 Likes on 2 Posts
Originally Posted by Cebby
That looks like great stuff, but is a bit beyond what I want to spend currently. Of the stuff that is inexpensive, is there one clearcut leader in the bang for the buck category?
Are you talking about the SonicWall stuff or Linksys?

At $40 (after rebate) with free shipping the Linksys B router is a loss-leader for them. They must be giving them to buy.com!


I can't think of ANY solution for under $40 Cebby.
Old 07-26-2004, 04:12 PM
  #7  
Registered User
 
4Hummer's Avatar
 
Join Date: Jul 2004
Location: Canada
Posts: 1,969
Likes: 0
Received 1 Like on 1 Post
For security. The best way to LOCK DOWN a wireless connection is By MAC Address. In your router setup wizard you can allow access to your LAN By MAC Address (Unique Address given to every NIC Card.. Tpye IPCONFIG /all from the DOS Promtto find out what your MAC Address is). ADD the Wireless Devices you want access too ONLY. Dont bother with WEP. anyone with any "hacking" Background can hack into WEP in under 20 min.

If you dont want your Neighbours or "Drive By Hackers" Getting access to you LAN Lock it down.
Old 07-26-2004, 06:35 PM
  #8  
Contributing Member
 
rwmorrisonjr's Avatar
 
Join Date: Aug 2002
Location: Home: Aurora, CO; Work: The People's Republic of Denver
Posts: 1,991
Likes: 0
Received 0 Likes on 0 Posts
Cebby, I have one that you can have for free. It's a Netgear WGR614v4 that I've upgraded with the latest firmware. It also has full encryption including the new WPA standard. PM me if you're interested, I'm sure it's within your price range!
Old 07-26-2004, 06:37 PM
  #9  
Contributing Member
 
rwmorrisonjr's Avatar
 
Join Date: Aug 2002
Location: Home: Aurora, CO; Work: The People's Republic of Denver
Posts: 1,991
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by midiwall
At $40 (after rebate) with free shipping the Linksys B router is a loss-leader for them. They must be giving them to buy.com!
Old technology that they're trying to clear from the warehouse. Now they have 108 meg 802.11g so that means that 54 will be coming down in price soon too.
Old 07-26-2004, 07:01 PM
  #10  
Contributing Member
 
MvCrash's Avatar
 
Join Date: Jul 2004
Location: Northern NJ
Posts: 342
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by 4Hummer
For security. The best way to LOCK DOWN a wireless connection is By MAC Address. In your router setup wizard you can allow access to your LAN By MAC Address (Unique Address given to every NIC Card.. Tpye IPCONFIG /all from the DOS Promtto find out what your MAC Address is). ADD the Wireless Devices you want access too ONLY. Dont bother with WEP. anyone with any "hacking" Background can hack into WEP in under 20 min.

If you dont want your Neighbours or "Drive By Hackers" Getting access to you LAN Lock it down.
Greetings,
Well I'm pretty sure that I don't know anyone that can hack WEP in 20 minutes but then I may not have a hacking backround. It would take a good amount of time for someone to be sitting in front of you house collecting data to break a WEP key. There are some serious problems with the WEP encryption software and it is possible for someone with knowledge of Cipher text to break your WEP Keys. I would turn it on since it does encrypt the data and would keep most folks out of your network. There would have to be a substantial reason for somone to take the time to do it. If your interested in reading about the WEP problem, here is a link. Its complicated but readable.
http://www.isaac.cs.berkeley.edu/isaac/wep-faq.html

I have a few software proggies that can spoof MAC address without much fuss. If your using MAC address security, and the addresses are not secured (encrypted) it would be easy to sniff your network and come up with the MAC address.
Personally I would use WEP, MAC Address, and not use DHCP. Limit the IP addresses to the amount of computers your using on your network. Also, keep an eye out for folks sitting in front of your house with a laptap and a pringles can aimed at your house. This could be a sign of someone working on your network.

MV
Old 08-02-2004, 04:00 PM
  #11  
Contributing Member
 
CynicX's Avatar
 
Join Date: Jul 2004
Posts: 2,370
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Cebby
I recently got a new laptop that has an integrated "G" card. My iPaq has an integrated "B" card. Both have bluetooth too if that matters. Everything else is wired (two PC's currently, but the whole house is wired).

I am currently using a Linksys router for the wired stuff, but sold off my wireless access point a while back. I have no problem parting with it if it doesn't fit in the mix.

I think I'd prefer a wireless router that includes a few ports that I can add switches to expand wired capacity. What about some sort of firewall?

Some of the newer Netgear stuff looks promising... Any recommendations?

I recommend Linksys. Only because thats what I have, I initially had some trouble setting it up when I first got it and knew nothing about it, but you wont have a problem. My father has D-Link and doesnt have a problem, although I dont know anything about D-Link I know it was easier on the initial setup then linksys. I recommend enabling WEP @ 64 bit (128 if your paranoid). I dunno anyone that could sit outside and hack into your system without you noticing and is someone really going to do that, do you have anything on your computer that a super hacker is going to drive to your house, hide in your bushes to get onto your computer and find out yotatech password or something?...not very likely....I have the Linksys wireless G which also has 4 switches...I have 1 computer wireless, 1 laptop wireless, 1 computer wired and my xbox wired...all of which work perfectly.....
Old 08-02-2004, 05:10 PM
  #12  
Registered User
 
4Hummer's Avatar
 
Join Date: Jul 2004
Location: Canada
Posts: 1,969
Likes: 0
Received 1 Like on 1 Post
Originally Posted by MvCrash
I have a few software proggies that can spoof MAC address without much fuss.

Personally I would use WEP, MAC Address, and not use DHCP. Limit the IP addresses to the amount of computers your using on your network.

Also, keep an eye out for folks sitting in front of your house with a laptap and a pringles can aimed at your house. This could be a sign of someone working on your network.
MV
Thats Funny, Good one.

Yeah Spoofing MAC's is pretty easy if the can figure out that the MAC address is. there are allot of programs that will let let you see pretty much all network traffic on a wireless connection (Cough "solar winds" Cough).

The above combination would work best. Only allow by MAC address, Enable WEP, limit IP's, and no DHCP. Also PLEASE guys PLEASE change the default user name and password for your router. By default its admin and admin.
.
As for the time it takes to hack into WEP... I've personally seen it done in 20min but I can also take over an 1hour..
.
.

Last edited by 4Hummer; 08-02-2004 at 05:12 PM.
Old 08-02-2004, 05:25 PM
  #13  
Contributing Member
 
PoBoy's Avatar
 
Join Date: Dec 2002
Location: Phoenix, AZ
Posts: 1,998
Likes: 0
Received 0 Likes on 0 Posts
Bottom line...if you are a home user you should not worry all that much. The chances of some actually TRYING to get in are pretty slim unless you are in a large apartment complex with a bunch of young adults and kids. I honestly wouldnt worry that much about it. Granted it could happen - but what really do you have to lose? Back your stuff up regularly as you should do anyway and save yourself the money. A $90 wireless linksys rotuer should have plenty of protection for your needs. Where there is a will there is a way when it comes to technology. The only SAFE computer is one unplugged and burried 30 feet underground in a block of cement...but I hear "worms" can sitll infect that deep (yes that is a corny computer geek joke). Do what you can...but realize that someone has to WANT to get in in teh first place. Then look at what you have to give them...anything good? Probably not other than internet access, email addresses, and some serial numbers.

Last edited by PoBoy; 08-02-2004 at 05:27 PM.
Old 08-03-2004, 02:23 AM
  #14  
Registered User
Thread Starter
 
Cebby's Avatar
 
Join Date: Sep 2002
Location: Pittsburgh, PA
Posts: 11,199
Likes: 0
Received 1 Like on 1 Post
Originally Posted by rwmorrisonjr
Cebby, I have one that you can have for free. It's a Netgear WGR614v4 that I've upgraded with the latest firmware. It also has full encryption including the new WPA standard. PM me if you're interested, I'm sure it's within your price range!
Thank for the offer! I did some research and found the newer ones have a bit better range which I need.

Can I add an unmanaged switch to the WGT634U? I need a few more ports...
Old 08-03-2004, 04:19 AM
  #15  
Senior Member
 
data's Avatar
 
Join Date: Jun 2002
Location: Arkansas
Posts: 1,896
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by MvCrash
Greetings,
Well I'm pretty sure that I don't know anyone that can hack WEP in 20 minutes but then I may not have a hacking backround. It would take a good amount of time for someone to be sitting in front of you house collecting data to break a WEP key. There are some serious problems with the WEP encryption software and it is possible for someone with knowledge of Cipher text to break your WEP Keys. I would turn it on since it does encrypt the data and would keep most folks out of your network. There would have to be a substantial reason for somone to take the time to do it. If your interested in reading about the WEP problem, here is a link. Its complicated but readable.
http://www.isaac.cs.berkeley.edu/isaac/wep-faq.html

I have a few software proggies that can spoof MAC address without much fuss. If your using MAC address security, and the addresses are not secured (encrypted) it would be easy to sniff your network and come up with the MAC address.
Personally I would use WEP, MAC Address, and not use DHCP. Limit the IP addresses to the amount of computers your using on your network. Also, keep an eye out for folks sitting in front of your house with a laptap and a pringles can aimed at your house. This could be a sign of someone working on your network.

MV
Well said! Lock it down as much as possible and you shouldn't have a problem.
Old 08-03-2004, 10:44 AM
  #16  
Contributing Member
 
MvCrash's Avatar
 
Join Date: Jul 2004
Location: Northern NJ
Posts: 342
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by data
Well said! Lock it down as much as possible and you shouldn't have a problem.
Thanks for the compliment, snort snort......air snort!!!!!




MV
127.0.0.1
Old 08-06-2004, 06:13 AM
  #17  
Registered User
 
jht3's Avatar
 
Join Date: Jul 2004
Location: Alexandria, VA
Posts: 139
Likes: 0
Received 0 Likes on 0 Posts
if you feel like waiting, the 802.11i is in the works and will be the most secure version yet

and as for cracking WEP keys in 20min to an hour, i call BS. you have to transfer a serious amount of packets to collect enough interesting ones to crack a 40-bit key, let alone a 104-bit key. i've done it but i was flooding my network with packets.

remember the old adage: you don't have to be able to outrun the bear, you just have to be able to outrun the guy next to you.

lockdown your AP more than your neighbor and most people will leave you alone.

Last edited by jht3; 08-06-2004 at 06:19 AM.
Old 08-06-2004, 02:48 PM
  #18  
Registered User
Thread Starter
 
Cebby's Avatar
 
Join Date: Sep 2002
Location: Pittsburgh, PA
Posts: 11,199
Likes: 0
Received 1 Like on 1 Post
Originally Posted by Cebby
Can I add an unmanaged switch to the WGT634U? I need a few more ports...
Anyone?
Old 08-06-2004, 04:56 PM
  #19  
Registered User
 
4Hummer's Avatar
 
Join Date: Jul 2004
Location: Canada
Posts: 1,969
Likes: 0
Received 1 Like on 1 Post
You should be able to add a switch no problem. even a 2nd access point.

Air Snort. There's another very popular wireless program. Go way to get basic infromation from wireless LANs. A descent "script kiddie" program. Not really a true hacking program. But excellent for the NooB
Old 08-06-2004, 07:54 PM
  #20  
Registered User
 
ldivinag's Avatar
 
Join Date: Dec 2003
Location: N37 39* W122 3*
Posts: 1,526
Likes: 0
Received 0 Likes on 0 Posts
Originally Posted by Cebby
Anyone?

yes, the switch should be a no brainer.

in fact, for something even cheaper, get a hub...

since the AP is a switch to begin with, it's no big deal if the traffic from one port on the hub goes up one level to the AP, instead of staying within the unmanaged switch.

in such a small environment where:

internet -> AP/switch -> hub -> multiple machines

the hub is almost zero performance hit

now,

internet -> gateway -> managed switches -> routers -> FDDI link -> switches -> routers -> hub -> my work machine and 200 hundred other machines off the same hub

and i need to get files off a server from a diff subnet from the first managed switch, then yeah... the hub sucks...


Quick Reply: "Secure" wireless B/G. Recommendations...



All times are GMT -8. The time now is 09:44 AM.