Protecting my home network

[Radar]

I was reading the thread related to bandwidth theft and thought I needed to post some questions in order to protect myself:

Scenario: I have a Netgear DG834G wireless router/adsl modem which I'm waiting to install once Telkom has activated my ADSL line. I will be connecting it to one PC with my second PC connected to the Netgear via LAN cable. The wireless functionality will be utilised by notebook. All PC's and notebooks running XP. I'm also using Grisoft's free antivirus (i.e. AVG).

1. How do I protect the network from bandwidth theft and other unauthorised access ? e.g. change passwords - how do i do that on the netgear ? ; close/protect the home network using 'keys' - how do I do that ?

2. What do firewalls have to do with this and can I set them up to assist me e.g. ZoneAlarm or use XP's ?

3. Slightly unrelated: I'm intending to get a wifi phone when I next upgrade, will I be able to use it to connect to my home network wirelessly and do things like sync to the family's calendar, control things remotely (would require apps to be downloaded to the phone I assume) ?

 

[dabouncer]

Right, While Logged into ur Netgear :

1)Click Remote Management in the Menu on the left at the bottom, make sure Turn Remote Management is UNTICKED! Bandwidth theft half sorted. Next with Wireless, Click Wireless Settings at the top left, Define an SSID (name for ur network), UNTICK Allow Broadcast of SSID. Use WPA-PSK (Wi-Fi Protected Access Pre-Shared Key) as ur network security, define a reasonable password, not too short either. Then Click on Setup Access List in the middle of the page, TICK Turn Access Control On. Each machine will need to be added to this list (wireless machines of course) with its unique MAC address which makes it almost impossible for an outsider to gain access to ur network if their MAC address isnt allowed.

2)Win XP Firewall works for me. Maybe get an app that shows all ur current network activities like which program is accessing the net with what ip address(Netlimiter 2 is a good option).

3) No clue on VOIP phones im afraid. Id imagine ud have to set it up in ur access list based on MAC address and then it will need to store the password to ur wireless network and all should be ok.

 

[StoneCold]

Dabouncer, I also use the WinXP firewall in conjunction with Netlimiter 2. I just want to know, do u have the firewall enabled in Netlimiter 2 as well, or is yours disabled as well ?

 

[dabouncer]

Netlimiter 2 Monitor doesnt have a firewall. I use Netlimiter 2 Monitor, Xnet Stat and sometimes a home made app in conjunction with AVG 7.5.

 

[Radar]

Thanks for the response Dabouncer.

I read in the sticky about bandwidth theft that there are instances when you also need to ask your ISP/Telkom to change a password on their side. Would any of the advice you've given me require that ?

With regards to the cellphone, I believe its the N73 that has wifi, so it should be able to logon onto the wireless network at home (if access is setup correctly), and use it as an internet access point and access the 2 PC's and notebook. Not sure if or how it will work, but will get back to it when I have the option to upgrade.

 

[dabouncer]

No problem. You only need to request a password change from ur isp if u suspect bandwidth theft. (You can have ur ISP acc locked onto ur line port with several ISPs, i however WOULDNT recommend this!!!) Make sure when u choose passwords, dont choose something like "password" as ur password. Be sensible, use letters and numbers and maybe even special characters if u really wana be safe. (Applies to Internet and Wireless Network Password)

 

[JungleFacedJake]

I read in the sticky about bandwidth theft that there are instances when you also need to ask your ISP/Telkom to change a password on their side. Would any of the advice you've given me require that ?

That is strictly necessary only if your router has been online ie: connected with the default password. If someone can connect to your router they can steal your ISP password and use that to steal your bandwidth. If the router has never been online and you have changed its default password you should be safe.

 

[Gnome]

I would recommend moving to Web-Africa not only are they cheap, have excellent customer support, they also have a web client that enables you to lock your account to your line and change your password via the web interface.

Apart from changing the Router password (For both the Wireless and Web-Interface) you should enable WPA/WPA2, WEP is no good and I won't even mention how bad idea insecure wireless network is (We have 2 insecure WLAN's in the area close to me which I can log into, I can access all the PC's on the network,yep no passwords, and I've could see their ADSL username & password's.)

EDIT: Just about every router I have seen also has a option to lock access to the router to the LAN side only, which is usually enabled by default, but definitely a good idea to check.