Anyone use a Netgear WNR2000 router?

Page may contain affiliate links. Please see terms for details.
Hehe, heres a top tip for wifi, regardless of router.
Turn OFF all encryption and security.
record the mac address of each device you want attached to your network.
Put them in the access list for the router.

Nothing can connect to the internet via your router except your selected devices.
Any communication between your PC and bank, shop etc is encrypted via SSL and the browser so security still exists when it is needed and no-one can steal you bandwidth because they can't connect :-)

Job done.

Obviously, if friends with laptops etc. visit then their mac address will need adding to the router.

Everyone can see you have an insecure wireless connection but they can't connect to it anyway.

My work colleague & neighbour spent 2 days trying to hack my wifi before he asked what I had done because he couldn't understand it :smile:
 

gaz

Cycle Camera TV
Location
South Croydon
Although your technique to stop people from connecting to your network does work, and will stop any who has any lack of knowledge. but someone with the right knowledge could easily still see what your doing over non-secure websites AND connect to your network by spoofing one of the address of your active machines.

Suggesting you just use MAC address filtering is silly, use all the security you are provided with, it may be a pain to set up but it is well worth it.

_____

moving on to the problem in hand, it's probably easier to use 2Loose's suggestion and turn all settings off and get it to work like that, then add security as needs be.


___

How to spoof a mac address without connecting to the network or using one of the computers:

It's simple really, all you need is an application that can 'sniff the data packets' this can effectively show you whats going on, so as long as there is activity on the network you can see a MAC address and then spoof it.

I'll send you my address later for that scotch :laugh:
 
Gaz, I totally agree about 'use all the security available where possible comment', However, while setting things up, turning it all on at once means trouble shooting is a pain - as you say.
Personally, I am not worried about non-secure stuff, but I am worried about people connecting to my network and using my bandwidth.

Using EtherealWireshark etc. can show you the content of my non secure comms, but these are encrypted when on secure sites via SSL. Also, AFAIK, to get my MAC (the PC, not the router) using these tools, you would have to already be on my network.

(pm me if you know different with your address :becool:)
 

gaz

Cycle Camera TV
Location
South Croydon
2Loose said:
Gaz, I totally agree about 'use all the security available where possible comment', However, while setting things up, turning it all on at once means trouble shooting is a pain - as you say.
Personally, I am not worried about non-secure stuff, but I am worried about people connecting to my network and using my bandwidth.

Using EtherealWireshark etc. can show you the content of my non secure comms, but these are encrypted when on secure sites via SSL. Also, AFAIK, to get my MAC (the PC, not the router) using these tools, you would have to already be on my network.

(pm me if you know different with your address :becool:)

Oh no doubt about turning them all on at once, i hope i wasn't suggesting that this is the best way, as thats not how i would do it.

I'm not sure if wireshark can do it (but i don't see why not), but i have used another application that can get the MAC address of a PC that is connected to the network if it's using a non-secure setup.
 

rh100

Well-Known Member
2Loose said:
Gaz, I totally agree about 'use all the security available where possible comment', However, while setting things up, turning it all on at once means trouble shooting is a pain - as you say.
Personally, I am not worried about non-secure stuff, but I am worried about people connecting to my network and using my bandwidth.

Using EtherealWireshark etc. can show you the content of my non secure comms, but these are encrypted when on secure sites via SSL. Also, AFAIK, to get my MAC (the PC, not the router) using these tools, you would have to already be on my network.

(pm me if you know different with your address :becool:)

Hi 2loose

Might be time to rethink your strategy

There is a certain linux distro' available tailored to this type of thing with all the right tools on. Not a whiz on linux myself but I followed the web guides and succesfully broke into my own network, I was not a happy bunny so made some changes.

It works, I think, by injecting packets onto a network and tries to break the key, I've just done a quick search and there seems to be a method of bypassing MAC filtering by sniffing and cloning the MAC to start the process.

Rule of thumb for me is - make it as hard as possible for anyone to hack my network and they will bugger off elsewhere to an easier one.
 

Rezillo

TwoSheds
Location
Suffolk
http://blogs.zdnet.com/Ou/?p=454&tag=col1;post-43 is a good read as is the older http://blogs.zdnet.com/Ou/index.php?p=43.

I've come across friends who think this is all overkill for home use until I point out that some spotty youth in a nearby house might think it just fun and a challenge to completely hack their network.

John
 
Definitely food for thought, I think I'll revisit the security for the GF's laptop and go for a more belt and braces approach.

I use a wire currently, only turning the wifi on when she visits, but the new n type router on the floor means I may have a play over Xmas and check it out.

Cheers for all your comments guys.
 

rh100

Well-Known Member
Try the links from here: http://kb.netgear.com/app/products/model/a_id/12168

looks like the link to download the manual is broken, but they have a walkthrough guide which you may be able to reconfigure it with if you dare. But you will then need to know how to reconfigure everything else to match the new key.

Normally you set the wireless key on initial setup.
 

Manonabike

Über Member
How do I find the key for the thing? I'm trying to link it to my Nokia 5800 and it doesn't want to know.

You will need to login and either set a new key or make a note of the key and encryption type

default address is 192.168.62.1 so type in your browser 192.168.62.1
user name is admin and password is password.
 

rh100

Well-Known Member
On the link from my last post, there is an option to view a walkthrough for 'Windows Wireless Zero Configuration utility' - that should allow you to set up the tablet PC if you now have the key.

Some routers will show the key/passphrase but Windows won't. The key and passphrase can look different, but are essentially the same - the key would be fixed length hexadecimal, 26 characters I think, usually this key will be created from a passphrase - as this is more user friendly (but less secure due to being easily remembered). Different systems and manufacturers drivers use/display these differently.
 
Top Bottom