How to secure a wireless network against hacking attempts?

Hi all,
Could anyone on these forums provide me with a step-by-step guide on how to secure a wireless network based around a Netgear DG834PN router ( http://bc.whirlpool.net.au/bc/hardwa...w&model_id=391 ) against external hacking attempts, both via local wireless packet sniffing and any tips/guide on how to secure the network against people hacking my IP address via malware or any other means?

I am currently running WPA2-PSK encryption on the network.

Where are the vulnerabilities to spying/hacking/snooping attempts on the network? Malware is one, local wireless packet sniffing is another. What are the others?

My guess is the spy is someone I know, but this isn't certain, although means to trace them would be helpful also.

Much appreciation for all advice or references on where to look.

Its been a while but if I remember rightly there are some linux based tools I have used to crack wifi passwords, and subsequently gain access to the networks. This was running normal WEP though.

if you are that concerned, then a good starting point would be to make the wpa pass phrase randomly generated, long and changed often, and then lock all access down to specific MAC addresses.

Buy a good antivirus suite that also deals with malware/spyware - we use eset endpoint.

Cain & Abel are the tools I use for packet sniffing / password cracking / resilience testing

Quote:

---

Originally Posted by Thelps

My guess is the spy is someone I know, but this isn't certain, although means to trace them would be helpful also.

---

Just out of interest, how exactly do you know there is a spy?

How about enabling MAC address filtering and just putting in the MAC addresses of the devices which are allowed to connect? Is this a home router?

Having a hidden SSID and changing the name of both the SSID and the long random passwords frequently whether this is once a fortnight or once a week etc ( up to you how frequent )

Jokingly I was going to say disconnect the mains power lead / cable from the wi-fi AP or router :P

Use WPA2 with a decent password, turn off WPS ( the easy pin code join ) and bes sensible with power settings.

Hiding the ssid and Mac filtering are largely pointless as WiFi scan apps find them easily and Mac filtering is defeatable in seconds with a packet scanner.

Make sure the AP firmware is up to date and the admin password is secure.

If there is a 'spy' they have probably found a tool for ripping the password out of a laptop... or you've let a guest onto the network, and they have unchecked the 'hide password' box and shared the results.