Wired router security options

ZuntarZuntar North Carolina Icrontian
edited February 2007 in Science & Tech
Hey, I have a wired network at home and i have never really had any security issues so far, but I wonder if and what measures I can take to "lock down" my network.

I have a netgear RP614 web safe router with VPN and such. I have only certain folders set up as "shared" and a network (connected to my router only) printer (HP 6127). I use only avg free for anti virus and the windows firewall.

Can I .... should I do more to secure my system and with out system hogging software?

Thanks for your time.

Comments

  • PterocarpousPterocarpous Rosie the Riveter Lives On in CA, USA! New
    edited February 2007
    Zuntar wrote:
    Hey, I have a wired network at home and i have never really had any security issues so far, but I wonder if and what measures I can take to "lock down" my network....I have a netgear RP614 web safe router with VPN and such. I have only certain folders set up as "shared" and a network (connected to my router only) printer (HP 6127). I use only avg free for anti virus and the windows firewall....Can I .... should I do more to secure my system and with out system hogging software?...Thanks for your time.
    Hello Zuntar. Good questions.

    Your router is VPN capable but unless you're using VPN, that feature really doesn't do anything to add to the security of your Internet connection or LAN.

    It is a good idea to run a software as well as a hardware firewall. They each address different issues/vulnerabilities. You don't have to resort to a resource hog when it comes to a software firewall, though. Comodo Group offers a free and fully functional Personal Firewall. It beats the hec out of McAfee, Norton, & Zone Labs' security software. You can find Comodo Group HERE. They offer a free AV solution, too but I haven't tried that one yet.

    You can help to protect the computers on your network from hostile websites by modifying the HOSTS file on each computer. Please, visit THIS thread for more information on MVPS HOSTS. Secondly, if you're running XP Pro or MCE machines, you can turn off simple file sharing and password protect each user profile (including the Administrator profile) on each computer. Use a good password. (See below for a link to an online password tester.)

    As for your router, four things you could do are:
    • Turn off remote management (if it's enabled)
    • Turn off respond-to-ping on the WAN side (IOW, set it to "stealth" mode)
    • Turn off UPnP unless you really need it
    • Password protect access to the router w/ a good password. You can find a password strength tester HERE.
  • RWBRWB Icrontian
    edited February 2007
    IMHO all that extra security is for people who feel someone is out to get them, which in most cases is simply.... useless paranoia.

    A few good things is on the windows side setup a different account on the system that has no Admin rights... and have the Admin account with a good strong password as noted in the above post. Good virus protection comes in handy against any trojans and other virus's that would bypass a good firewall/router. No need for extra software unless you want to do something specific.

    I have AV software, and a hardware firewall, and it's worked great for many many years.... I hate extra programs I have enough of those on my laptop as it is for media keys, remote controllers, TV, wireless, AV, bluetooth, blah blah blah.
  • ZuntarZuntar North Carolina Icrontian
    edited February 2007
    Thank you!!
    I had a guy in IT once tell me to change my internal ip address and maybe also my mac address. Yes, no?
  • PterocarpousPterocarpous Rosie the Riveter Lives On in CA, USA! New
    edited February 2007
    Zuntar wrote:
    Thank you!! ...I had a guy in IT once tell me to change my internal ip address and maybe also my mac address. Yes, no?
    You're welcome, Zuntar.

    I'm not sure what he meant by changing your internal IP address.... You can set your LAN IP addresses to static (unchanging) IP addresses or you can leave them unassigned and let the router dole them out for you. I'm not sure where that would have any impact on security, though.

    As for changing your MAC, you've effectively done that by putting your router between the WAN and your LAN. What is seen from the WAN (Internet) side is your router's MAC, not your computer's. You can, however, "spoof" your router's MAC address if you like. One reason some people do this is to get around a one-computer limitation an ISP has imposed. In which case, you could change the MAC of your router to that of the computer you registered w/ your IP. I haven't seen anything like this in a long time, though. Most IPs these days have relented and figure it's a given people are going to use routers. (I'm guessing that's the case)
  • ZuntarZuntar North Carolina Icrontian
    edited February 2007
    SWEET!!

    Like I said, never had a problem before, but ya never know! Thanks again!
  • airbornflghtairbornflght Houston, TX Icrontian
    edited February 2007
    Zuntar wrote:
    SWEET!!

    Like I said, never had a problem before, but ya never know! Thanks again!

    The internal IP address is the computers IP adress on the lan, and the external IP adress is what anybody outside the lan see's, such as the internet.
  • PterocarpousPterocarpous Rosie the Riveter Lives On in CA, USA! New
    edited February 2007
    Zuntar wrote:
    SWEET!!...Like I said, never had a problem before, but ya never know! Thanks again!....
    You're certainly welcome, Zuntar. You're right to be mindful of your network security esp. when connected to an "always on" Internet connection. You're using a nice little router (I took a look at it on Netgear's web site.) It provides you w/ two firewalls (NAT & SPI) as opposed to the NAT-only firewall that most consumer routers provide. In addition, wired is a hec of a lot more secure than wireless so you've improved your security in that regard, too. You might want to read through your router manual if you haven't done so already to become more familiar w/ what options you have for configuring it.

    Enjoy! Come back w/ any questions, etc. :smiles:
Sign In or Register to comment.