OT: unathorized network user.

[Bob Goodwin]

Tim wrote:
> Tim:
>   
>>> NB and NB well:  MAC filtering so your neighbour doesn't accidentally
>>> connect is NOT a SECURITY issue.  It doesn't matter, at all, if they try
>>> and connect when you've got good encryption.
>>>       
>    
>
> Bob Goodwin:
>   
>> Encrypt what?  Where do I start implementing encryption?
>>     
>
> The traffic.
>
> You can use WPA2 encryption on the wireless hardware, with good
> passwords/encryption keys.  I haven't recently gone looking to see if
> there's an easy crack for this, it's a while since I had to deal with
> securing someone else's network.  We cable things.  But going on prior
> examples, I don't hold much faith in it being uncrackable.  Lesser, and
> older, schemes are definitely no good, though (e.g. WEP).
>   
I just wanted someone to assure me that encryption meant  WEP/WAP 
whatever.  I thought there may have been something else I had missed.  
Actually I have little worry about anyone gaining access to our wireless 
LAN due to our remote location and the absence of nearby neighbors.  I 
know from experience that casual users with portables can't get into the 
system so my security is good enough to keep honest users from 
accidentally accessing this system.

We are however limited to WEP due to an old WET11 Ethernet adapter I put 
on the kids computer.  However as I said I don't consider the wireless 
as a likely security problem.
> Or, you can tunnel.  In this case, you need your access point to only be
> *between* the remote wireless devices and some controllable network
> device.  That other "controllable" part of your network is where you
> apply the restrictions.  If your access point is also your internet
> router, they'd have unfettered access to the internet.  You use an
> encrypted tunnel through unencrypted networks.
>   

This sounds like a "science project," at least it would be for me.  The 
Netgear router gives me a convenient point of control and enables me to 
block access as needed, allow only certain MAC addresses, etc.  I know 
none of this is high security, but probably enough for our purposes.  
Now if only I could get it to actually mail me it's logged data.  I told 
it to do so, but that doesn't work and I can't find the log files except 
via the browser screen?

Thanks. 

Bob Goodwin