Reply to thread

Message

<blockquote data-quote="TairikuOkami" data-source="post: 822328" data-attributes="member: 61892">The less, the better, but it still supports too much. I have got $20 worth TL-WR940N. I have disabled all possible features: WPS, UPnP, VPN, ALG, DHCP, IPv6, MAC Filtering. I keep SPI Firewall to filter some unsolicited traffic. I set it to 20MHz (2,4GHz) and 11n only to limit the number of compatible devices. Subnet is set to 255.255.255.248 to limit the number of hosts to 5. I use 63 special characters long WPA2 password.Before you ask, I have recently found out, that MAC Filtering is not a security feature (just like hiding WiFi name turns the computer into a beacon). MAC address is not sent encrypted, so a hacker can sniff and copy it within minutes, it can only make WiFi connection more problematic, because every single packet has to include MAC address for verification. Imagine typing your windows password like 50 times per second, it is useless.It sucks, there are some known vulnerabilities, but as with all cheap routers, they are released and forgotten. The latest firmware is from 2016.&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite119" alt=":rolleyes:" title="Roll eyes&nbsp; &nbsp; :rolleyes:" loading="lazy" data-shortname=":rolleyes:" /></blockquote>

[QUOTE="TairikuOkami, post: 822328, member: 61892"] The less, the better, but it still supports too much. I have got $20 worth TL-WR940N. I have disabled all possible features: WPS, UPnP, VPN, ALG, DHCP, IPv6, MAC Filtering. I keep SPI Firewall to filter some unsolicited traffic. I set it to 20MHz (2,4GHz) and 11n only to limit the number of compatible devices. Subnet is set to 255.255.255.248 to limit the number of hosts to 5. I use 63 special characters long WPA2 password. Before you ask, I have recently found out, that MAC Filtering is not a security feature (just like hiding WiFi name turns the computer into a beacon). MAC address is not sent encrypted, so a hacker can sniff and copy it within minutes, it can only make WiFi connection more problematic, because every single packet has to include MAC address for verification. Imagine typing your windows password like 50 times per second, it is useless. It sucks, there are some known vulnerabilities, but as with all cheap routers, they are released and forgotten. The latest firmware is from 2016. :rolleyes: [/QUOTE]

Verification