[mdlug] Linksys WRT1900AC v2 Setup

[Jeff Hanson]

MAC address filtering and hiding an SSID is both very weak security.  MAC
addresses can be faked.  IIRC, SSID can be sniffed from active connections.

Disabling remote access is helpful depending on how secure the
authentication is.

It's a matter of evaluating practical risks vs. benefits.  If you are
concerned about amateurs freeloading on your network then it's easy enough
to fool them.  Against a pro then don't count on it.

I don't bother with address filtering or SSID hiding.  I'm in a rural area
where even accidental connections are rare.  I block remote access because
I don't need it.  Internally I use sshfs with keys for file sharing between
anything that matters, unauthenticated Samba for anything that doesn't.

On Tue, Dec 26, 2017 at 12:27 PM, Peter Bart <petertheplumber at att.net>
wrote:

> Merry Xmas All,
>         I am setting up my new router. I am using a Linksys WRT1900AC
>         v2 running DD-WRT. I will eventually be setting this up to use
>         VPN, but my more immediate question relates to MAC address
>         filtering, hidden vs visible SSID. I've allways used MAC
>         address filtering as a layer in my lockdown of my wireless AP.
>         Ditto for hiding my SSID's. Along with going through and
>         disabling any services enabled by default and not used. One of
>         those would be remote access to the router.
>
>         What are your opinions of  necessity as the the three items
>         named? Am I too paranoid? I do these each as a layer in my home
>         network security, I don't view anything as the end all. Are
>         there any other things I should be doing in addition or in
>         place of?
> --
> Best Regards,
>
> Peter The Plumber
> <petertheplumber at att.net>
> _______________________________________________
> mdlug mailing list
> mdlug at mdlug.org
> http://mdlug.org/mailman/listinfo/mdlug
>