Security by obsurity WAS: [Re: [MLB-WIRELESS] ap ip numbers.]

Dave Keller david at bay.net.au
Sun May 11 12:35:00 EST 2003


Hi All,

Rik brought up an interesting point in his post about hiding the identity of his Default Gateway by using a non-standard ip address.  While security by obsurity is good, it generally only slows people down from breaking into your network resources. 

Prefereably the basic security on a default gateway should consist of layer 2/3 filtering, where the mac and ip addresses of the authorised devices on your network are listed in the router for allowing access to it. Ideally mac address would be better. Thus only allowing those authorised mac and ip addresses to access your router. Then if some one does wardrive your network, they can only browse your local connection and not get leach from your net connection. 

Ciao
Dave.
  ----- Original Message ----- 
  From: rik 
  To: Matthew Hill ; Peninsula Wireless ; Melbourne Wireless ; Routing Workgroup 
  Sent: Sunday, May 11, 2003 12:05 PM
  Subject: Re: [MLB-WIRELESS] ap ip numbers.


  any number, as long as the sysadmin knows it, its like people put there gateway as .1 so its easyer to remember, i dont cous if someone jumps on my network they have to keep guessing my gateway ip
    ----- Original Message ----- 
    From: Matthew Hill 
    To: Peninsula Wireless ; Melbourne Wireless ; Routing Workgroup 
    Sent: Sunday, May 11, 2003 11:48 AM
    Subject: [MLB-WIRELESS] ap ip numbers.


    Hello all.

    Just a query for those persons with aps and lans in the same building.

    Is there a prefered convention to assigning the ap an ip address. do you give it .1 or the last number in a block, or what ?

    Thanks

    MAtthew
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.wireless.org.au/pipermail/melbwireless/attachments/20030511/dbbae556/attachment.html>


More information about the Melbwireless mailing list