Wifi on A1200

[jj]

What was it ?
 
Also OT but seriously people, if somone wants to crack you wireless connection they will.  But the point of having even WEP is to stop people stealing your internet from next door. Your average Joe bloggs know no mopre than windows auto connecting to any un-secure routers.

[Gilthanaz]

@JJ: There is also the legal issues with unencrypted Wireless LANs:

Actually a WiFi should be firewalled anyway. The only reason why encrypted WiFis are really needed (besides the data security) is, that (at least over here) you are held responsible for whatever happens on your connections. If someone was to connect over my WiFi and do illegal things, even if I can prove it was not me, they'll get me arrested for "providing help in illegal activities" if I had not encrypted the connection. As soon as there is a minimal encryption that any evildoer must break before using the connection for his evil plots, I'am not to be held responsible anymore

- Gil

[kolla]

Actually a WiFi should be firewalled anyway.

Using what - aluminum foil?

[Gilthanaz]

Mmmmkaaaay... no.
             

            .............Intarweb
..................|
LAN <=|> Firewall <|=> WLAN Router <=> WLAN Clients


And then some simple filters:
* by MAC
* by fixed IP per MAC  (MACs alone are way too simple to forge, takes like 2 seconds)
* Match chain => MAC ! fixed IP per Hostname => REJECT
* If you're hardcore you can also make a finger match for the OS that HAS to run on that machine with that IP and exactly that MAC, or even funnier:
* Have a random high port open on your machines where you have a rsync daemon drop a keyfile every hour that has to be synchronized on the firewall (using rsync with private keys for each machine), and have a match condition on the exact file bytes
* I guess I could come up with about 200 more creative solutions how to fortify a network so literally no one without physical access can fsck with it, not even if they break the WAP/WEP/WPA/[...] encryption.

- Gil

P.S:
Being paranoid and overly securing things does not mean they are not watching me!!

[Vanfanel]

JJ: As I said before, the card is of course only 802.11b, and my router only supported g/n. Got a new router that supports everything and gigabit wired. Netgear N600 wireless dual band gigabit router (WNDR3700). Nice feature about it is it supports 4 different SSIDs. So I can have my always running 2.4 and 5 GHz SSIDs as secured as I can make them, and open an isolated guest SSID as the router refers to it for the Amiga. A useful feature, as also my Nintendo DS only supports WEP encryption, and I also rarely go only with it.

Gil: The router acts as a firewall, but I don't think that's what you mean. As for the filters, I think I can set a fixed IP per MAC without too much hassle. Your other suggestions are great, but I don't know how to implement them in the first place, and they'd be impossible for the various game consoles that have internet access. Possibly for the Amiga, too. It may be able to do the finger match, but I don't know about the rsync daemon.

[ncafferkey]

Also OT but seriously people, if somone wants to crack you wireless connection they will.  

If that someone is a government agency, I wouldn't be surprised if they could get in. But for anyone else, how are they going to crack a strong WPA password? The only widely known attacks for WPA I'm aware of require that a weak password and a common SSID is used.

[kolla]

Mmmmkaaaay... no.
             

            .............Intarweb
..................|
LAN <=|> Firewall <|=> WLAN Router <=> WLAN Clients

OK, we have totally different ideas about what security is, you just want to protect your LAN stuff, I also want to protect my wireless equipment.

* by MAC

MAC addresses are quite visible once WEP is cracked

* by fixed IP per MAC

IP addresses are equally visible

* Match chain => MAC ! fixed IP per Hostname => REJECT

Just hoping the intruder won't figure that out?

* If you're hardcore you can also make a finger match for the OS that HAS to run on that machine with that IP and exactly that MAC, or even funnier:
* Have a random high port open on your machines where you have a rsync daemon drop a keyfile every hour that has to be synchronized on the firewall (using rsync with private keys for each machine), and have a match condition on the exact file bytes
* I guess I could come up with about 200 more creative solutions how to fortify a network so literally no one without physical access can fsck with it, not even if they break the WAP/WEP/WPA/[...] encryption.

Really? With broken WEP, I can steal both your mac address and IP address and start hijacking your TCP sessions. And your machine will be doing all the creative stuff to make sure both of us are online.

[jj]

Do you think people go around the place trying to hack wireless networks.
 
As with most things its a crime of opportunity.
 
Yes I used WPA2 mostly, but I doubt my wireless was every comprmised if i had just wep,  and I mean ever.

[LoadWB]

Do you think people go around the place trying to hack wireless networks.
 
As with most things its a crime of opportunity.
 
Yes I used WPA2 mostly, but I doubt my wireless was every comprmised if i had just wep,  and I mean ever.

So are a lot of home and most car burglaries.  I still lock my doors.

[jj]

So do I, but i think the paranoia over WEP is a bit over the top