What am I missing?

Hi all
I am new to wireless and I have just installed Netgear WG602 WAP and WG511
notebook card. I have:

- changed the SSID
- changed the setup password
- set up MAC address filtering (to the MAC of the WG511)
- set up 128 bit WEP

what else am I missing to make it secure?

I have not put passwords on my desktops and notebook... will that be
something i should be doing too? phew... i'm just glad it all worked.

Thanx

"Yeuk" <(E-Mail Removed)> wrote in message
news:bj95n0$g3sjf$(E-Mail Removed)...
> Hi all
> I am new to wireless and I have just installed Netgear WG602 WAP and WG511
> notebook card. I have:

Whatever

> - changed the SSID

Sniffers can detect the SSID

> - changed the setup password

Fine.

> - set up MAC address filtering (to the MAC of the WG511)

MAC addresses can be changed (read spoofed)

> - set up 128 bit WEP

Someone who knowns the techniques can hack WEP in 5 minutes!

> what else am I missing to make it secure?

VPN

> I have not put passwords on my desktops and notebook... will that be
> something i should be doing too? phew... i'm just glad it all worked.

That's the same for wired or wireless networks!

Regards,

Thor.

> > - set up MAC address filtering (to the MAC of the WG511)
>
> MAC addresses can be changed (read spoofed)
>
I guess the real issue is how long it would take to enumerate through (up
to) 281 million million MAC addresses. Yes one can spoof a MAC address, but
you'd have to have a very good reason to justify the effort in finding one
which matches the filter of an Access Point.

"Thor Spruyt" <(E-Mail Removed)> wrote in
news:ELX5b.1647$(E-Mail Removed):

<snip>
>> - set up 128 bit WEP
>
> Someone who knowns the techniques can hack WEP in 5 minutes!
>
>> what else am I missing to make it secure?
<snip>

That may be a little exaggeration. Esp. for a home situation with
relatively little traffic going through the wireless access, changing the
WEP key weekly should provide good security. Of course, upgrading to WPA
is better.

A good guide for wireless:
http://www.linksys.com/splash/wirelessnotes.asp

And for basic WinXP security, I like my page (of course, I'm biased)
http://www.mccune.cc/WindowsXP.htm:

--
Tom McCune
http://www.McCune.cc
Please use PGP for Privacy & Authenticity

Easy, you use a sniffer (Airsnort for eample) to detect the MAC address of a
host that is communicating succesfully with the AP, then use that MAC addy
when the host goes offline

"martyn" <(E-Mail Removed)> wrote in message
news:bj9i1t$boq$(E-Mail Removed)...
> > > - set up MAC address filtering (to the MAC of the WG511)
> >
> > MAC addresses can be changed (read spoofed)
> >
> I guess the real issue is how long it would take to enumerate through (up
> to) 281 million million MAC addresses. Yes one can spoof a MAC address,
but
> you'd have to have a very good reason to justify the effort in finding one
> which matches the filter of an Access Point.
>
>