Reply to thread

Message

<blockquote data-quote="Lenny_Fox" data-source="post: 859274" data-attributes="member: 82776">Apologize for asking, but I have read elsewhere that adding Mac Address filtering adds more hassle than protection.I have recently hardened our home network and used advice I found on the internet. I remember a few additional tips (because I have implemented them on our home network).<ol>
<li data-xf-list-type="ol">Use a long passphrase for user admin and user passwords (as long as the router allows).</li>
<li data-xf-list-type="ol">Disable remote access to the router&#039;s console</li>
<li data-xf-list-type="ol">Create a guest network with limited lease time (maximum of 12 hours or so) and disconnect/lockout&nbsp; guest network at night using parental control. They also adviced to leave the guest network visible and give it the old route name. Tthe guest network acts as a decoy.</li>
<li data-xf-list-type="ol">Reduce IP range for home network and disconnect WIFI/lockout home network for one hour at night. A&nbsp; hacker can&#039;t lock you out by using all internal IP-addresses and set lease time to eternal and you always have a time window to take back control. The advice was to make the SSID network name of the home network hidden.</li>
<li data-xf-list-type="ol">Check whether build-in firewall has disabled options, check internet what a settings does instead of blindly enabling it.</li>
</ol>So I am interested in the MAC-address filtering: is it worth the hassle?Also would like to get feedback on the additional tips: are they sound advice or mumbo jumbo (because of the conflicting advice on mac address filtering,I am now also unsure about the five above (extra) measures I have taken.</blockquote>

[QUOTE="Lenny_Fox, post: 859274, member: 82776"] Apologize for asking, but I have read elsewhere that adding Mac Address filtering adds more hassle than protection. I have recently hardened our home network and used advice I found on the internet. I remember a few additional tips (because I have implemented them on our home network). [LIST=1] [*]Use a long passphrase for user admin and user passwords (as long as the router allows). [*]Disable remote access to the router's console [*]Create a guest network with limited lease time (maximum of 12 hours or so) and disconnect/lockout guest network at night using parental control. They also adviced to leave the guest network visible and give it the old route name. Tthe guest network acts as a decoy. [*]Reduce IP range for home network and disconnect WIFI/lockout home network for one hour at night. A hacker can't lock you out by using all internal IP-addresses and set lease time to eternal and you always have a time window to take back control. The advice was to make the SSID network name of the home network hidden. [*]Check whether build-in firewall has disabled options, check internet what a settings does instead of blindly enabling it. [/LIST] So I am interested in the MAC-address filtering: is it worth the hassle? Also would like to get feedback on the additional tips: are they sound advice or mumbo jumbo (because of the conflicting advice on mac address filtering,I am now also unsure about the five above (extra) measures I have taken. [/QUOTE]

Verification