Live Chat & Podcast at 1:00PM Eastern on Sunday!
There's no such thing as a stupid question, but they're the easiest to answer.
JoinTour
Login
Search
General Security
Tag Cloud
access acer asus bios bsod computer crash desktop dns driver drivers error ethernet excel freeze gaming graphics hard drive hardware hdmi internet laptop malware memory monitor motherboard network printer problem ram registry repair router slow software sound trojan ubuntu 11.10 uninstall usb video virus vista wifi windows windows 7 windows 7 32 bit windows 7 64 bit windows xp wireless
Search
Search for:
Tech Support Guy Forums > Security & Malware Removal > General Security >
Intrusion Detection

Reply  
Thread Tools
DCLXVI666's Avatar
Member with 55 posts.
 
Join Date: Nov 2007
Location: California
Experience: Advanced
08-Nov-2007, 06:26 PM #1
Intrusion Detection
Hey all,
Last night I had someone hack into my wireless (home) network. Somehow they were able to break my WPA and get in. I had DHCP set to only hand out the same amount of IP address as i have computers. They were able to figure out my network address and basically started at the bottom of the IP range and started going up because everyone of my computers (4 total) received an IP conflict error, one right after the other and in numerical order. I killed the power to the router and when I restarted it I was completely locked out and it would seem that a bunch of my network setting had been changed as I could not connect to nor ping the router and my modem would not sync up with the router. Needless to say it's go me a little paranoid and I am considering putting an IDS in place. The problem that I am running into is finding one that is not only designed with wireless security in mind but also a) will run on a Windows Xp machine and b) is open source. I will pay for software if I absolutely have to but would honestly prefer not to. If there are any programs (open source or reasonably priced) that meet the following requirements i would greatly appreciate any suggestions. Thanks in advance.
klam's Avatar
Senior Member with 181 posts.
 
Join Date: Apr 2006
Experience: Advanced
08-Nov-2007, 08:07 PM #2
Hey there,

You know what's the coolest security feature you can put into a router? (in my humble opinion of course) it's the mac address filter.

Spoofing the mac address is possible but it's way harder to do than ip spoofing plus, the hacker would need to know what mac address to spoof anyways.

For more information read on:
http://compnetworking.about.com/cs/w...macaddress.htm

Also consider disabling the broadcast of your signal.

Hope it helps =p
__________________
"the only refuge from the damnation of the panta rei, and she guessed it was the Pendulum’s business, not hers"
DCLXVI666's Avatar
Member with 55 posts.
 
Join Date: Nov 2007
Location: California
Experience: Advanced
08-Nov-2007, 10:03 PM #3
My fault, i guess I left that part out but I was using MAC filtering and they were still able to get in which is why I'm more than a little paranoid about locking everything down hardcore. Any other suggestions?
lunarlander's Avatar
Computer Specs
Senior Member with 3,491 posts.
 
Join Date: Sep 2007
08-Nov-2007, 11:40 PM #4
Disable the SSID broadcast, it makes your network harder to find.
Change your SSID from the default.
Use a long complex password for the router admin.
Install firewall on all your PCs, if there is a zone setting, set it to use the 'public hotspot' strong settings.
Run Hijackthis on all PCs and save the output. Then you have a snapshot of what is normal for your PCs.
Backup your data, in case the attacks become nasty.
DCLXVI666's Avatar
Member with 55 posts.
 
Join Date: Nov 2007
Location: California
Experience: Advanced
09-Nov-2007, 11:45 AM #5
Thanks for the information but this is stuff that I already know and practice. I work for the US Army in Information Assurance and Network Security. These are all strategies that I have used as long as I have had a wirelss network. The next thing to do would be to install and run an IDS on my system. I know that there are plenty out there that are opne source but many of them only run on a Linux platform and other aren't designed with wireless networks in mind. I am simply asking if anyone knows where I can get such a program. I appreciate you responses and trying to help me out but I am not an "average" user. I know that an IDS seems like I'm jumping the gun but I'm very paranoid now becuase they were able to get in past all my security measures. Thanks!
lunarlander's Avatar
Computer Specs
Senior Member with 3,491 posts.
 
Join Date: Sep 2007
09-Nov-2007, 12:33 PM #6
I have only used Snort, and its not a wireless ids. But heres an article reviewing a bunch of wireles ids.
http://www.networkcomputing.com/show...leID=189500017

Just curious, how do you know that it is a wireless attack?
DCLXVI666's Avatar
Member with 55 posts.
 
Join Date: Nov 2007
Location: California
Experience: Advanced
16-Nov-2007, 02:33 PM #7
Well I had my wireless router set to hand out only hte amount of IPs needed for each of my computers. Well, one by one each of my computers, in numerical order, began getting IP conflicts. Then, all at once all of my computers lost their wireless connections. I pulled the plug on the router and after an hour or so I restarted it and went to get into it via CAT5 and it wouldnt let me get in at all. I ended having to do a factory reset on it. Whoever got in there, locked me out of my own router. Thanks for the reply though, I will take a look at this link.
klam's Avatar
Senior Member with 181 posts.
 
Join Date: Apr 2006
Experience: Advanced
18-Nov-2007, 01:16 PM #8
That's an interesting problem you've got there.
I'd be very interested to see what your solution to this problem is.
lunarlander's Avatar
Computer Specs
Senior Member with 3,491 posts.
 
Join Date: Sep 2007
18-Nov-2007, 11:27 PM #9
What make and model is your wireless router? Maybe its a good idea to search for it at securityfocus.com to see if there are any vulenerabilities?
DCLXVI666's Avatar
Member with 55 posts.
 
Join Date: Nov 2007
Location: California
Experience: Advanced
19-Nov-2007, 11:39 AM #10
It's belking wireless 802.11G. I will look into it on the mentioned website. For anyone who cares, I have been unable to find an open source wireless IDS that runs on windows. I think that the solution might be to just install some form of linux (possibly Fedora) on my home server and go from there. I am alos wanting to stand up a network firewall. Any suggestions?
__________________
*****My God Has Horns*****
DCLXVI666
Reply

THIS THREAD HAS EXPIRED.
Are you having the same problem? We have volunteers ready to answer your question, but first you'll have to join for free. Need help getting started? Check out our Welcome Guide.

Search Tech Support Guy

Find the solution to your
computer problem!




Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
WELCOME TO TECH SUPPORT GUY! Are you looking for the solution to your computer problem? Join our site today to ask your question -- for free! Our site is run completely by volunteers who want to help you solve your computer problems. See our Welcome Guide to get started.
Thread Tools



Facebook Facebook Twitter Twitter TechGuy.tv TechGuy.tv Mobile TSG Mobile
You Are Using:
Server ID
Advertisements do not imply our endorsement of that product or service.
All times are GMT -4. The time now is 09:18 PM.
Copyright © 1996 - 2011 TechGuy, Inc. All rights reserved.

Powered by Cermak Technologies, Inc.