Prihlásiť sa Odoslať Novinky :: FAQ :: Rozšírené vyhľadávanie :: Napísali o nás :: Ankety
Main Menu
· Home
· 
· FAQ
· 
· Diskusia
· 











Main Menu
· Domov

Moduly
· AvantGo
· Downloads
· FAQ
· News
· Recommend Us
· Reviews
· Search
· Sections
· Stats
· Topics
· Top List
· Web Links
· Forum

Jazyk
Výber jazykovej mutácie:



The time now is 28.03.2024 - 22:17


WIFI a security

Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
Page 9 of 11 < 1...67891011 >
Author Message
si
Post subject: RE: WIFI a security  PostPosted: 01.01.2005 - 23:41 #13999
Majster


Joined: Jan 12, 2003
Posts: 4250
Location: /dev/null
jestro: hmm samotny traffic robi keepalive ? Smile tak to mi staci niekomu cmajznut IP & MAC a stale nieco tlacit do linky po tom co dotycny vypne komp Very Happy
 
 View user's profile Send private message Send e-mail Visit poster's website  
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 01:25 #14001
Basic


Joined: Dec 31, 2004
Posts: 12

Ja hovorim o wifi ako o vrstve ethernet. Tu vobec nejde ci mas kabel, optiku ale wifi. Skratka server zisiti ci si zadal good heslo alebo nie.
To jest je jedno na ako si pripojeny, blokaciu robi najbazpecnejsia cast siete, tj server(firewall)
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 01:27 #14002
Basic


Joined: Dec 31, 2004
Posts: 12

si wrote: ›jestro: hmm samotny traffic robi keepalive ? Smile tak to mi staci niekomu cmajznut IP & MAC a stale nieco tlacit do linky po tom co dotycny vypne komp Very Happy


Sak jasne to je pohoda, ale ako budes kazdu chvilu kontrolovat ci ma komp pusteny? A na druhej strane zase cmajznut IP a MAC mozes tak ci tak, ale ked je komp odhlaseny tak si ani nepingnes. tj. zvysenie bezpecnosti. A ked doriesime aj software aplikaciu, ktora pri vypinani PC posle serveru infosku logout. tak uz je to parada a by som povedal ze skoro na 100% neprelomitelne
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
eXplorer
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 01:44 #14003
Majster


Joined: Feb 25, 2003
Posts: 2606
Location: BA,BB
jestro: akeho RADIUS klienta pouzivas pre Win ? Uz mi je to jasne, skor som ale RADIUS videl nasadeny na asosiaciou wireless klientov na AP ...
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
si
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 01:58 #14004
Majster


Joined: Jan 12, 2003
Posts: 4250
Location: /dev/null
jestro: mozem vyuzivat IP aj paralelne s nim, pri stavovych spojeniach mi sice moze trocha vadit ak by stihal poslat RST skor ako ja ACK Smile ale da sa to (ja ked budem mat rozumne nastaveny firewall tak dany clovek ani nezisti ze pouzivam jeho IP)
pokial doriesis SW aplikaciu ktoru spominas, tak zas je v silach pripadneho utocnika simulovat odhlasovanie sa klientov aj ked to tito nechcu, a ti ked sa budu musiet kazdej polminuty prihlasovat znova (najlepsie uprostred neakej dobrej sietovej hry ktora im kvoli tomu aj padne Very Happy ) tak ta aj ukamenuju Very Happy
 
 View user's profile Send private message Send e-mail Visit poster's website  
Reply with quote Back to top
eXplorer
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 02:23 #14006
Majster


Joined: Feb 25, 2003
Posts: 2606
Location: BA,BB
Stara znama vec, ale mozno tam niekto najde pre seba uzitocne info : http://mobil.idnes.cz/mob_tech.asp?r=mo ... b_tech_brz
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 02:34 #14007
Basic


Joined: Dec 31, 2004
Posts: 12

si wrote: ›jestro: mozem vyuzivat IP aj paralelne s nim, pri stavovych spojeniach mi sice moze trocha vadit ak by stihal poslat RST skor ako ja ACK Smile ale da sa to (ja ked budem mat rozumne nastaveny firewall tak dany clovek ani nezisti ze pouzivam jeho IP)
pokial doriesis SW aplikaciu ktoru spominas, tak zas je v silach pripadneho utocnika simulovat odhlasovanie sa klientov aj ked to tito nechcu, a ti ked sa budu musiet kazdej polminuty prihlasovat znova (najlepsie uprostred neakej dobrej sietovej hry ktora im kvoli tomu aj padne Very Happy ) tak ta aj ukamenuju Very Happy


tak je jasne sw aplikacia toto nemoze robit. co sa tyka double IP tak wokna ti hned pri kolizii IP ju odstrania. V tomto bode ide o to,ze pustis k vode lamerov. jasne ze profi ludi to zdolaju. to uz by si musel robit ine veci napr. vpn tunel medzi radiami a ked das este ak radius medzi ap/client a este toto tak tomu neverim,ze sa najdu 3 ludia,ktory by to prelomili v jednom meste.
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 02:36 #14008
Basic


Joined: Dec 31, 2004
Posts: 12

eXplorer wrote: ›jestro: akeho RADIUS klienta pouzivas pre Win ? Uz mi je to jasne, skor som ale RADIUS videl nasadeny na asosiaciou wireless klientov na AP ...


zatial to mame prihlasovanie cez web protokol https, tj ssh web-kryptovany web
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
bakula
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 10:51 #14009
Ucen


Joined: Okt 21, 2004
Posts: 792

Radius server chodi na linuxe uplne super momentalne to testujem lebo to hodlam naostro nasadit.
konfiguracia je v dvoch suboroch clients a users.
Do clients treba doplnit:
# Client Name Key
#---------------- ----------
firewall test
client name je nazov pocitaca ktory authenticuje userov (musi mat dns zaznam!) key je kluc na komunikaciu medzi servrom a clientom

do users uz potom nahadzat klientov a ich hesla (steve / testing)
steve Auth-Type := Local, User-Password == "testing"

Potom uz len nastartovat radiusd a je to...

PHP script na radius authentication sa da najst napriklad tu:
http://www.mavetju.org/programming/php.php
 
 View user's profile Send private message  
Reply with quote Back to top
popo
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 10:58 #14010
Ucen


Joined: Aug 20, 2003
Posts: 598
Location: Zvolen
jesto: odporucam precitat prielom 23 - cookie injection
iba ak by si to nemal osetrene
 
 View user's profile Send private message Send e-mail Visit poster's website  
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 11:17 #14012
Basic


Joined: Dec 31, 2004
Posts: 12

popo wrote: ›jesto: odporucam precitat prielom 23 - cookie injection
iba ak by si to nema
l osetrene


AKO EXISTUJE NIECO co sa neda prelomit. tu stale hovorime o bezpecnosti siete wifi do urcitej miery. aj bsd ci linux server sa vie dostat nejaky odbornik. ale ty ti nebudu robit cierne konekty do MW siete. A lamery co to robia toto urcite nedokazu a ked ano tak urcite nie viacej ako 3% zo vsetkych. Very Happy Laughing
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
Robert
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 12:36 #14013
Majster


Joined: Okt 19, 2003
Posts: 2339
Location: Bratislava
Quote: › eXplorer: Da sa RADIUS nahodit aj na ethernet ? proste ziadne AP ziadny, wireless len kablova LANka s NEmanazovatelnymi switchi a jeden router...


V takom kontexte pomoze asi len PPPoE. Inak dobra zvratenost - robi z permantneho pripojenia cez Ethernet dialup pripojenie, kde sa treba prihlasovat. A ked je raz uz niekde PPP, tak nieje problem to kombinovat s Radius-om.
 
 View user's profile Send private message Visit poster's website  
Reply with quote Back to top
bakula
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 13:16 #14014
Ucen


Joined: Okt 21, 2004
Posts: 792

Robert wrote: ›
Quote: › eXplorer: Da sa RADIUS nahodit aj na ethernet ? proste ziadne AP ziadny, wireless len kablova LANka s NEmanazovatelnymi switchi a jeden router...


V takom kontexte pomoze asi len PPPoE. Inak dobra zvratenost - robi z permantneho pripojenia cez Ethernet dialup pripojenie, kde sa treba prihlasovat. A ked je raz uz niekde PPP, tak nieje problem to kombinovat s Radius-om.


Preco nie u mna chodi radius tak ze ked zadas do explorera napr. www.google.sk (moze byt hocico) presmeruje ta na stranku s prihlasenim a ak zadas spravne heslo tak ides (pouzivaju to hlave inet kaviarne).
A je uplne jedno ci na kably alebo wifi. Vyhoda je v tom ze u klienta nemusis nic nastavovat proste im len posles hesla. Jednu vec som ale neskusal a sice ako to bude chodit za routrom kde vystupuju pod jednou mac a IP.
 
 View user's profile Send private message  
Reply with quote Back to top
jestro
Post subject: RE: WIFI a security  PostPosted: 02.01.2005 - 15:00 #14022
Basic


Joined: Dec 31, 2004
Posts: 12

bakula wrote: ›
Robert wrote: ›
Quote: › eXplorer: Da sa RADIUS nahodit aj na ethernet ? proste ziadne AP ziadny, wireless len kablova LANka s NEmanazovatelnymi switchi a jeden router...


V takom kontexte pomoze asi len PPPoE. Inak dobra zvratenost - robi z permantneho pripojenia cez Ethernet dialup pripojenie, kde sa treba prihlasovat. A ked je raz uz niekde PPP, tak nieje problem to kombinovat s Radius-om.


Preco nie u mna chodi radius tak ze ked zadas do explorera napr. www.google.sk (moze byt hocico) presmeruje ta na stranku s prihlasenim a ak zadas spravne heslo tak ides (pouzivaju to hlave inet kaviarne).
A je uplne jedno ci na kably alebo wifi. Vyhoda je v tom ze u klienta nemusis nic nastavovat proste im len posles hesla. Jednu vec som ale neskusal a sice ako to bude chodit za routrom kde vystupuju pod jednou mac a IP.


no to mas zalezitost siete. my davame len router pre garantovane linky. A tam je zarucene ze router ma svoju IP ale clovek, ktory sam pripaja a odpaja nema vzdy aktivnu IP
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
zok
Post subject: Je to na zacudovanie ale reltek je v pohode  PostPosted: 05.02.2005 - 10:32 #15570
Basic


Joined: Feb 04, 2005
Posts: 175
Location: Gan
goose wrote: ›mathew: asi myslel sietovku Smile ....
Sa smejete z relteku mna dost prekvapila ked som ju prepol do monitor modu a pouzil prislusny soft a**dump, a**crack, e**ereal Wink, wep,mac+ipcky za jeden den ...
 
 View user's profile Send private message Visit poster's website ICQ Number 
Reply with quote Back to top
Display posts from previous:     
All times are GMT
Post new topic Reply to topic
View previous topic Printable version Log in to check your private messages View next topic
Page 9 of 11 < 1...67891011 >
Jump to:  

Powered by PNphpBB2 © 2003-2005 The PNphpBB Group
Credits

(C) SKFree 2002-2010: Powered by POSTNUKE. Môžete prebera? naše správy vo formáte XML(RSS)