Hi /comp/
I own a DLink-Di524 wireless router, and even though I've set MAC filters, disabled SSID broadcast and enabled WPA2, someone keeps trying to connect to it (light flashing repeatedly, logs report denied access from mac address xxx...)
My question is, is there anyway to simple stop this guy from connecting in the first place? Or should I just rely on the MAC filters and WPA2? It's really frustrating to see this person hammering my router >:(
Name:
Anonymous2007-09-07 0:59 ID:e6OMWIY1
yeah
Name:
Anonymous2007-09-07 1:46 ID:zmnTeiWL
The only thing you can really rely on is WPA2 with a really strong passphrase. Not even the MAC filter is reliable. If you want you can switch off the router when you don't need/use it. Not much else you can do, except set up additional security measures. SecurID and/or a transparent proxy with authentication would provide enhanced security if they managed to crack into your WLAN for example.
Name:
Anonymous2007-09-07 1:50 ID:e6OMWIY1
juts get a hammer and crack their head
Name:
Anonymous2007-09-07 3:10 ID:vXs1FheO
I would temporarily connect the router to another isolated system not connected to the Internet but running a web server and spoofed DNS that serves nothing but goatse.
Name:
Anonymous2007-09-07 8:37 ID:BW15mGTF
PROTIP: Disabling SSID broadcast doesn't buy you anything. It just disables the advertising frames. Other frames are still transmitted with your SSID in it, and they are trivial to pick up using something like AirSnort or NetStumbler (what is it with wifi security tools and CamelCase?).
Name:
Anonymous2007-09-07 13:55 ID:XAgeLnpX
tinfoil wallpaper
Name:
Anonymous2007-09-07 16:39 ID:3rlrREUJ
>>8
Contrary to popular belief, tinfoil actually INCREASES the strength of elecromagnetic waves, such as radio and microwave.
Maybe this is why the wireless network that my laptop sometimes picked up is gone now. This was a Belkin router, though and I somehow thought the people owning it were too stupid to secure it.
Maybe I shouldn't have stolen someone else's internets so much.
OP here.
I actually do leave my router turned off during the day, and only turn it on at night, but still every morning when I wake up I get 60 pages of ``Denied Access from...'' in the router status page. Is there anyway I can screw this person bad? Like maybe let him connect so I can sniff his passwords or whatever? >>5 sounds like an interesting idea, though I have no idea how to implement it ;o
Name:
Anonymous2007-09-08 5:38 ID:7Kbrokfv
>>12
Shouldn't be too difficult. You'd need to set up a webserver hosting only a mirror of goatse and a dns server that resolves all requests to said server.
Name:
Anonymous2007-09-08 5:47 ID:iAAhLEpf
>>12
yeah, you just need to setup a webserver, and make it so it only hosts goatse, then make a DNS server that sends all his internets so they go there and he will get goatse'd
Name:
Anonymous2007-09-08 6:41 ID:hwIPzeMy
Strong WPA pass.
Ban the MAC addresses that attempt to connect.
/thread
Name:
Anonymous2007-09-08 6:43 ID:afzDE8xf
>>15
Well, I've pretty much already done that, but he still keeps trying to connect. I'm trying to find out if there's a way to simply stop him from connecting in the first place, but I guess there isn't :|
You know what a wireless router really needs? It needs to have open-source code and complete specs, so that some whiz in some momma's basement can come up with a tracer app, where you can use placed positions of the router to arrive at a triangulation of the offending connecting unit by using the differing measurements of signal strength at each position.
Name:
Anonymous2007-09-08 7:18 ID:hwIPzeMy
>>16
Also change your DHCP and Netmask's. Should take them a long time to find you again then.
okay... my lack of attention is getting fucking stupid.
turn off your SSID broadcasting off too before changing the DHCP.
okay, i need more /b/ or something...
Name:
Anonymous2007-09-08 8:24 ID:7Kbrokfv
If you insist on trolling, at least use sage.
Changing the channel and turning off SSID broadcasting will accomblish nothing.
Changing the DHCP could confuse an intruder a bit but it would require changing the DHCP config file on the router and I'm sure you can't do that with the normal tools on most routers. Also you'd need to change the router's subnet and IP so that the intruder can't find it just from remembering the old IP. And you need to remember not accidentally using the DHCP yourself. All in all, too much effort for too little gain in security.
If you want real security, put the router in a DMZ and use some kind of SecurID/VPN/proxy authentication.
Name:
Anonymous2007-09-08 19:40 ID:6vvgdL+u
>>7,8
It should work if you also cover the floor and ceiling.
Name:
Anonymous2007-09-08 20:34 ID:en9mHTgY
>>12
If you want to screw with him, allow him through for a while. Set up a computer between the router and the internet connection, with a bridged network, sniffing the traffic. Put Ettercap into promiscuous mode, set up a log file. After you've let the offending user access the internet for a suitable period of time, run etterlog -p <logfile>. This will automatically scour the log file for login information (only works with insecure connections, like http).
For added kicks, get Ettercap to filter https in the url's and replace it http, which should get you login information if the user attempts to login to a secure site that also is accessible through http. May tip them off to something being wrong, as it will also basically deny access to secure sites that do not have insecure connections.
Name:
Anonymous2007-09-08 20:37 ID:en9mHTgY
Oh, I forgot. You have some other options available. Move the AP, decrease the transmission power, change from wireless B to A (I believe), cover the AP, or modify the environment (impromptu Faraday cage, basically stop the signal from leaking outside).
Additionally you should be certain with regards to the option of the fabric. http://www.portdress.net/ cheap wedding dresses Flower garments made from delicate material including Organza or chiffon will want far more care, and so better select silk, cotton or perhaps polyester clothes. From time to time long gowns trouble the kids and don’t allow them to take pleasure in their freedom of Additionally, choose a details neckline and also straight midsection. These will probably best improve your waistline thus making you look older in your wedding outfit. <br> <br> When most brides consider their bridal party, http://www.portdress.net/ cheap wedding gowns they possibly image their bridesmaids and maid of honour in matching outfits and shoes http://www.portdress.net/ Watches . even although you choose your wedding