Archived from groups: alt.internet.wireless (
More info?)
Change your admin password on the router to something complex if you
haven't done so already. If you already have, change it again. This
will ensure that nobody can gain access and add themselves to your MAC
filtered list. Also, change your WEP key. Are you using WPA? 128 bit
encryption? Change it to something new regardless.
Even if you're using 128 bit WEP encryption and not WPA, the perp.
would have to capture several gigs of data before cracking your key.
Chances are, the typical home user would have to keep the same key for
months on end before your key is cracked. Most users don't transmit
that much data even after several months.
I realize that you're not broadcasting your SID, still change that to
something complex also. There are available tools to find your network
even though your SID isn't being broadcast, but I still wouldn't make
it readily available like one poster suggested. You can look and see
what kind of speeds you're getting from your router. If there's ever a
decrease or performance issue, change the channel then.
Another thing I would do is to broadcast in G mode only. This will
eliminate anyone who may have an older 802.11b wirless card and make
them unable to connect. This is assuming of course that you yourself
don't have any B devices attached to your network.
Using WPA is the key. This fixes and solves many of WEP's weaknesses.
Are you running XP? If you're on a Windows 98 box you'll have to use a
3rd party app. like Funk or Meeting House.
Also, run a combination of the new Adaware SE and Spybot as these
programs find many of the popular key loggers. Maybe do that before
changing your admin password and WEP key to ensure that you aren't
being logged. There are many other apps. that you could Google that
will find loggers.
Recheck your MAC list too and ensure that the only machines being
allowed to connect are your own.
"DanR" <dhr22@sorrynospm.com> wrote in message news:<mTbYc.1414$8d1.197@newsread2.news.pas.earthlink.net>...
> Yes, find "airsnare". It will tell you the MAC address of the infiltrator.
> It will sound an alarm when the Wi-Fi is being accessed by someone other
> than the MAC addresses you tell airsnare to ignore. You can tell airsnare to
> sound off for any MAC besides your main computer and router to see if your
> being MAC spoofed. It also allows you to send a nasty message to the bad
> guy. (but through messenger which might not be enabled on the foreign
> computer)
> It's FREE.
>
> "bumtracks" <user@unknown.org> wrote in message
> news:fLrXc.931$yP4.95@trnddc08...
> Might do a search for & install AirSnare on the wireless laptop.
> Mainly alarms if an unauthorized MAC enters the LAN.
> It may show you what URL that rouge mac is connected to.
>
> I had a rouge,,, turned out to be mine. Routers here have their own two
> MAC's, Wireless and Wired. One router here has three MAC's.
>
> "Lisa" <spamstopper@herplace.com> wrote in message
> news:RICdnQD0GMavarDcRVn-sw@eatel.net...
> > Hi,
> >
> > I have a Netgear WGR614 router (frmware 1.12), with my laptop and my DLink
> > USB adaptor (for the TiVo) attached to the network. I use MAC filtering,
> > WEP, and I turned off broadcasting the SSID of my network. This morning I
> > checked the router for attached devices, and found an extra one! Checking
> > the computers under my Microsoft Windows Network showed nothing new.
> After
> > killing the wireless access point of the router, the extra device
> > disappeared, but so did my laptop and TiVo connection. This leads to two
> > questions:
> >
> > 1) how can I find out more information about rogue devices attached to my
> > network?, and
> > 2) what else do I have to do to keep rogue devices off my network?
> >
> > Thanks
> >
> >