upb
Premium
join:2004-03-15
Carriere, MS
 ·AT&T Southeast
| reply to Lalaland
Re: [Tomato] Wireless Filter Block list not enforced
said by Lalaland  :Does it only apply to the DHCP service and they're using fixed IPs? If so is there another way to block them? Is it just a time sensitive thing (ie that service starts after they get given an IP)? If they're cracking your WEP password, you must have some serious script kiddies nearby. In any case, there is another place you can block them in Tomato, and it might be worth a try.
Under the "Access Restriction" menu, you can set up a rule which by default blocks all computers from internet access, except those whose MAC addresses you have listed there. You choose "all day", "every day", "normal access restriction", "all except", and "block all internet access". You then list the MAC addresses of all machines allowed to use the Internet. Do not list IP addresses, even though it's acceptable.
This blocks anyone who manages to associate with your wireless access point from reaching the net, unless they can figure out the MAC address of one of your computers and spoof it. You should be able to at least discourage them from hanging around.
That, of course, still leaves them connected to your LAN — not a good thing — and should be used as a fallback defense. Have you used "Basic -> Wireless Filter" to set up allowed MAC addresses? That's the first place you really ought to go if you do MAC filtering (which provides only weak protection).
I'd try to figure out how to eventually move to WPA or WPA2, because that's the only really good way to have a secure WAP.
Good luck. |
