Ok, so i have a wireless network here at home, i am using DHCP because its easy, i dont have security turned on as i didnt really see the need for it. Im surrounded by old people who have there TV's turned right up all the time so i doudt they know what the internet is.. BUT, there is a younger couple next door to us who may have a computer..

My problem is that this morning when i for some reason checked my router settings i looked in DHCP connections, and there is one that it not one of the machine here in the house.. It has latched on. So i have the ip t has been assigned, the mac address of the computer and also the name of it.. Now not knowing the name of my neighbors this proves a hard start weather or not its them or not..

I have turned on mac filtering now, and just put in the mac address of the 3 computers which were on today in my house.. My PC, Mac and Wodges PC..
Was hopeing that this would give them the boot, but it hasnt, they still show up in my DHCP thing..

Ok, so the address that this 'person' has managed to gain is 192.168.2.3 on the network.. EWven though mac filtering is on i still have stuff show up from it in teh security log:

Oct.18.2005 02:14:32 security:813.901 Blocked Prot=17, 64.37.239.16:4672 > 192.168.2.3:11126 -Disallowed Destination I

Ive tried pinging teh machine and some other network shit i have on the mac i can try, but i keep getting that it cant resolve host.. It doesnt show up in my network so i cant connect to it either...

I dont wanna turn on security, cos some peeps say WEP slows the network down, my SSID is hidden so i cant really think why this has happened.. Ive restarted and all sorts but they still show up..

Can anyone help me out as to a way i can maybe track this person out, or even kick them off so they stay off?

DMZ was on, for that ip (because i have the playstation connected to the router as well) but ive disabled that now, so there not gaining axx because of that..

Is there maybe a way i can send the machine a message, or even do some other kinda shit with the router to kick them off for good, i dont want people leeching my bandwidth, having Wodge as a housemate is bad enough for that,, 85GB a month here and there know what i mean? :)


Hope maybe someone can help me out here on my Quest for answers.. Do fancy finding out its next door and kicking some ass though!

Router is a Belkin ADSL Modem with Wireless-G Router if thats any help...


Cheers

SiMON

WEP does not slow your network down. Nor does WPA (WPA-PSK) which is recommended over WEP if all your computers support it (but I don't know if all Macs do) because WEP is easily crackable (not for the average computer user though, it's still better than nothing). So this would be step 1, just secure that network. It's not just your neighbours, it's also war-driving your securing against. Remember, it's not just the use of your internet, they're on your LAN!! with easy access to your computers.

If you don't hook up new laptops or new computers all the time, simply turn off DHCP and assign static addresses. While you're at it, starting with the router, I would suggest to change the subnet you're on, this way you're effectively blocking anyone that may still have access by spoofing one of your devices' MAC address. E.g. if you are on 192.168.2.0/24 (the /24 indicates a subnet mask of 255.255.255.0), switch to 10.0.0.0/24 (make router 10.0.0.10 for example and computers .11 .12 and .13), or alternativaly something like 192.168.111.0/24 - you get the picture.

As you may know DMZ (DeMilitarized Zone) just means that all traffic on every incoming port is forwarded to a single IP (all traffic not linked to outgoing traffic from another internal IP). Why? This is unsafe and unnecessary. Find out what ports your playstation needs and forward those and only those.

Sounds to me like you've just been a little lazy about managing your network mate ;-)

To summarize:

-keep MAC filter
-implement WEP (or better yet WPA) encryption
-implement static IPs
-keep DMZ off and configure NAT properly (although this is unrelated to your neighbours' accessing your LAN)
-keep SSID hidden (although this is no guarantee your SSID can't be discovered anyway)

If anyone's really networking savvy, they can still get on. There's a limit to what you can do for your home LAN protection, but this should stop your average cheapskate neighbour who likes to use your internet without permission.

Ok.. I can do the static IP thing, will have to put all my settings back in and set the ip on each machine though right?..

But say for now i just wanna see what this person is doing.. I have an app called StreamWatcher on me Mac, that shows me all the info from all the ip's on the network, i can put in teh search field this 'cawthorn' and it will show me the acctivity from that address.. But it disappears after a few secs of it being there..

Is there a similar app on Windows (or even mac) that someone knows of that will just watch this and keep it all in a log so i can track back to see what its been up to ?

Si

there is no way they should be able to get on if your mac address filter is working....unless they are cloning your mac address in which case you should have major problems using the wireless lan yourself.....strange.

Just checked and they are definatly still there. Everytime i have looked it has had them in my list:

192.168.2.3 Cawthorn

Odd.. Oct.21.2005 17:36:43 security:223228.195 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Default Defense
Oct.21.2005 17:36:43 security:223228.195 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Disallowed Destination IP
Oct.21.2005 17:36:44 security:223229.193 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Default Defense
Oct.21.2005 17:36:44 security:223229.194 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Disallowed Destination IP
Oct.21.2005 17:36:45 security:223230.195 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Default Defense
Oct.21.2005 17:36:45 security:223230.195 Blocked Prot=17, 69.153.63.166:6346 > 192.168.2.3:6346 -Disallowed Destination IP

Thats from the security log, so something is trying to get to that IP on my network.. but i just dont know what or who..

Si

I wouldn't worry about it....

you'll never be able to stop them from making packets and fireing them out over the airwaves....as long as your access point isn't doing anything with them then it's nothing much to worry about right?

Just annoyinh to think that someone has managed to get an ip from my network..
and if i have some friends round with laptops or whatever, then i wanna use the playstation  all the ips will be taken up and ill have to add more onto it..

I'll get round to doing the whole static ip withing eventually.. just cant be arsed right now.

Si