login
Header Space

 
 

Re: securing OpenBSD wireless network

Score:
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
To: <misc@...>
Date: Monday, November 19, 2007 - 6:55 pm

Marco S Hyman <marc@snafu.org> wrote:


And downloading his mail with unencrypted POP3 for all to see...

You can use IPsec to discourage that, too.  The pf configuration
on my home WLAN gateway passes *only* ISAKMP negotiation and ESP
packets from/to the gateway.  ESP packets that don't match an IPsec
association are dropped.  To get a valid IPsec association, a host
needs to sucessfully negotiate with isakmpd.  And for that it needs
to authenticate (host key or password).  Of course stations can
still talk on the WLAN itself, but neighbors tend to have little
interest in that niche use.

-- 
Christian "naddy" Weisgerber                          naddy@mips.inka.de
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Re: securing OpenBSD wireless network, Christian Weisgerber, (Mon Nov 19, 6:55 pm)
speck-geostationary