: security


spotted dogs
Sep 21st, 2005, 02:24 PM
I am still getting used to the apple world and don't want to get caught with my pants down so to speak security wise...there seems to be alot of differing opinions on the levels of security mac users should run and to be honest I am rather unsure of what to set up. I am running an ibook g4 w/ airport and a wireless router (d link 524) on telus ADSL here in BC.

Can anyone make some practical recommendations regarding the type(s) of security I should set up... ie Firewall at the router, WEP key, 128 bit encryption, firewall on os 10.4 etc. for general net use, limited music downloads/file sharing like Limewire etc

I am not for lack of a better description a security freak..but at the same I would like to protect my system...
thanks all

mguertin
Sep 21st, 2005, 04:25 PM
If you want to lock things down fairly well at your router, try limiting the hardware addresses (MAC addresses) that can access it. While this is not a foolproof lockout, it's a good measure of security. While hackers can spoof the hardware address they will just as likely not bother and move on.

Howard2k
Sep 21st, 2005, 05:06 PM
* WEP is very weak, you should be using WPA-PSK with a 16 or more character passphrase if you can. If not, use WEP, but it should be your second choice. 128 bit WEP is no stronger than 64 bit WEP so if you're going to use WEP you may as well use 64 bit and save your fingers from typing the long keys :)

* Ensure that the DLink software is up to date on the router. Change all the passwords and disable management from the WAN interface

spotted dogs
Sep 23rd, 2005, 12:21 PM
After updating the firmware I was able to set a WPA-PSK password...that coupled with the osx 10.4 firewll turned on I figure I am pretty secure....a techy colleage suggested closing all the ports except the ones used for mail, ftp and http...except in the dlink model I have I am not sure how this is done..or is this going to be overkill? And one last question/comment...Brickhouse for os x seems to be pretty popular addon to the osx firewall..is it worthwhile loading or am I ok with the set up I have?