• Some users have recently had their accounts hijacked. It seems that the now defunct EVGA forums might have compromised your password there and seems many are using the same PW here. We would suggest you UPDATE YOUR PASSWORD and TURN ON 2FA for your account here to further secure it. None of the compromised accounts had 2FA turned on.
    Once you have enabled 2FA, your account will be updated soon to show a badge, letting other members know that you use 2FA to protect your account. This should be beneficial for everyone that uses FSFT.

1

Status
Not open for further replies.
Moros said:
Hello all -

My neighbor seems to think it's a good idea to use my wireless AP. I could implement some security measures on it, I know, but I would much rather catch him and send a little message. Then I will be glad to turn on all the security.

Does anyone know of any program or utility that will monitor my network and email me or something when a new DHCP lease is handed out? This way I could monitor it better from work. Thanks!
Click to expand...


You're better off just setting up your security features. WEP and MAC filtering for starters.
Something like a captive portal if you want to get fancy about it (http://www.publicip.net/zonecd/what.php).

Depending on what your using for your wireless AP you might not have any built in tools to detect the neighbor using the network.
 
What DHCP server are you using? Some have SYSLOG output; others have other manageable interfaces.

Maybe you can use Etherreal and set up a trigger.
 
I agree with Malk-a-mite, the best option isn't to shove it in the neighbor's face that he tried to connect to your AP, it's to secure and lock down your AP so no one else CAN connect.

But if you want to have a little fun with him, here's how you would go about it. You can't just "send him a message" like they do in hacker movies. There used to be the net send command and winpopup commands in windows, but they have long since been disabled for security reasons.

The best you could do is setup a captive portal and redirect the user to a custom web page. It would require a linux router and wireless card in place of your AP.

Do a google search for "captive portal". Without going into too much explation here, it involves some mac filtering, DHCP scripting, and DNS trickery where all DNS queries performed by this client will get resolved to a ficticious web page, hosted by you, which could contain whatever message you want like "get off my AP". As a result, any web page they try to open would get redirected to this page.
 
BollWeevil said:
The best you could do is setup a captive portal and redirect the user to a custom web page. It would require a linux router and wireless card in place of your AP.

Do a google search for "captive portal". Without going into too much explation here, it involves some mac filtering, DHCP scripting, and DNS trickery where all DNS queries performed by this client will get resolved to a ficticious web page, hosted by you, which could contain whatever message you want like "get off my AP". As a result, any web page they try to open would get redirected to this page.
Click to expand...

BW - have a look at the link I posted above - all you need is a spare machine with a CD drive.
 
For locking down the wireless segment I suggest a VPN, pure and simple. Personally speaking, unless your Wireless NIC and AP support WPA2/802.11i I suggest going with IPSec/VPN.

The captive portal idea is nice if you want to share out your wireless because you can use it for logging, AUP acceptance, etc. This way should anything "bad" ever happen (in a legal sense) you can use the logs for repudiation and pass Johhny Law on to who's responsible.
 
Heh, linux-router, squid proxy server, and a custom DHCP config to redirect him to any annoying website like !!!!!! or a "you are an idiot" javascript page, or badger-badger-badger page, or just about anything along those lines....


Or you can just lock down the AP............

ok, the !!!!! is any graphic puke inducing site, something about a dude with a stretched oriface.
 
Setup a box to act as a DNS server, DHCP server, and Firewall (IpCop, Smoothwall, M0n0wall, whatever), hook your internet to the red interface, hook your wireless to the orange interface, and hook your stuff to the green interface. Make sure the Green interface's DHCP hands out a real DNS address. Make sure the Orange DHCP hands out the firewalls DNS instead. Have that dns resolve all requests to Tubgirl.

Then let the fun begin. He can type in www.cnn.com and he will get tubgirl instead. He can type in anything and it goes to tubgirl.

After about a week or two of this, lock down your Access Point, and you shouldn't have to worrry about it anymore.
 
how about a simple net send when you know he's connected?
 
Well since the forum all seem to wish to teach the neighbor a lesson, has anyone considered... talking to the neighbor and asking him not to?

Radical concept and all I know, being plesant to the people that live in your neighborhood.
 
Status
Not open for further replies.
Back
Top