有無hardware firewall 推介

大前提係對方已經知道我所有設備既mac address 同係我付近,有無d firewall係就算佢知道我既mac address都搵唔到我ip?

你需要既係managed switch而非firewall
因為你係擋緊ARP

TOP

本帖最後由 s84292 於 2018-3-23 09:56 編輯

同NETWORK?

公司/宿舍內部鬥爭?

斷估你唔會係諗住同MIS 鬥掛
防火牆又好,L3 SW又好,買左但你冇相關NETWORK 知識,你買左都唔知點SET

TOP

回覆 3# s84292


    唔同network 佢係我隔離鄰舍 我之前用wifi已經俾佢hack左 我報過警 但差佬話我得過router firewall 記錄唔夠料拉佢 我而家屋企是但一樣野上網 佢就整d怪聲出黎 話比我知佢知我上緊網咁...
可唔可以教我點set野可以防止到?

TOP

回覆  s84292


    唔同network 佢係我隔離鄰舍 我之前用wifi已經俾佢hack左 我報過警 但差佬話我得過rou ...
gapgapso 發表於 2018-3-23 22:04


   
如果佢係"高手"

你搞乜基本上都冇用

問題係呀"高手"點解會比你知佢搞你

via HKEPC IR Pro v2.1.0 - Android

TOP

回覆 5# kofz


    我唔理佢高唔高 我而家只係防得就防 寬頻線我都整左兩條 其中一條只係比部全新無用任何無線野既電腦用,令外果條就好似打游擊咁用完即拔線...

TOP

本帖最後由 alanh999 於 2018-3-24 12:24 編輯

回覆 4# gapgapso


    Firstly I think you set up your wifi network in an insecure way at the very beginning , then after that guy hacked into your LAN he may have planted some monitoring softwares in one or some of your devices so he can sniff your network continuously.

1. Disable your wifi network
2. Scan all your mobile phones, PCs etc. to clear any malware
3. Setup your wifi with WPA2/PSK security with a strong passphrase
** wifi anykey is a constant threat, so you must remove this app from any of your phones if you or your family members have ever installed this. Also, change the wifi passphrase everytime after your friend came over to your home.

TOP

現用router model?
firmware?
setting wpa2+aes?

問題在router, firewall都未必有用

wifi power 較細d先



via HKEPC

TOP

整隻x86 router 行pfsense 先,之後d log 就會多到你唔想見到
跟手改router MAC address, 然後行wpa2、唔boardcast 新SSID、mac address filter 呢d 基本野
識就行埋wpa2 enterprise 用RADIUS server 做多一重認証
不過#8 Ching 個方法最簡單

TOP

本帖最後由 lkca 於 2018-3-24 22:34 編輯
整隻x86 router 行pfsense 先,之後d log 就會多到你唔想見到
跟手改router MAC address, 然後行wpa2、唔bo ...
Once 發表於 2018-3-24 17:29
router 如有wpa2 krack漏洞, 防火牆係無用, 係無線被截取通訊及監察

我有個x86 firewall行untangle
firewall 係router後面 transparency mode, wifi不經防火牆, 只有lan port經防火牆.

最近asus router wan port 都被 remote hack, 好幾個model 都有, asus無公報, 海外都有發生, ddns同 vpn被開啟

遲下要轉router做access point, 放firewall後面




via HKEPC

TOP