Question about wireless security

[TheInternet1980]

Correct me if I'm wrong in these assumptions

Modem connected to router, router connected by cat5 to my computer. My fiance's computer would be connecting via Linksys wireless b card. Now then, I have no security enabled on the router, save for MAC address filtering. No WEP, WAP, etc. Does this pose a security risk for her workstation in particular? I'm thinking no, as all the wireless card does is look for a signal from the Wireless Access Point? If it finds one, it communicates with it, if it doesn't it does nothing? The gist of the question, is there no way someone can get on her PC without access to the network as a whole? And since the network is filtering by MAC address for wireless connections, there's no way for someone to gain access to the network? Thanks in advace for responses.

 

[Madwand1]

No, MAC filtering is not realiable -- it's pretty weak. The MAC (and SSID) are actually transmitted in the data stream, so a sniffer could discover it, and infiltrate your network.

http://blogs.zdnet.com/Ou/index.php?p=43

Setting up WPA-PSK is pretty simple for the most part, esp. with current gear. I suggest that you do it.

The Linksys certainly has full WPA and WPA2 support. Most XP desktops support WPA at least via Microsoft support. There's a downloadable patch from Microsoft that enables WPA2.

It's not only your fiance's computer that's vulnerable because of your router -- your entire network is. Without working WPA security on the router, you'd be relying on each desktop's individual security. XP firewall might do the job, but why let anyone have free internet and access inside your network, and potentially subject you to their own viruses and security breaches if not deliberate malice?

 

[TheInternet1980]

I do have the firewall and those type of security features enabled on the Linksys router...not sure if that makes a difference or not?

 

[Madwand1]

Wired router security doesn't matter if you have no wireless security, which in modern terms you don't have if you don't have WPA at least. Really, what's the difficulty with enabling WPA? Of course you don't have to take advice.

 

[bREwIn dOdgEr dUDe]

holy shnikes, for the love of gawd, take the few minutes to set (her) the WPA, WEP security features... give yourself piece of mind without having to take time to ask... there are a lot of unscrups that will eventually find your unsecured network & can or will take full advantage...

 

[TheInternet1980]

I'll certainly take the advice...I guess I was under the impression that with MAC filtering enabled, I'd be good.

Thanks for the education fellas.