Re: Security in our local network

2015-08-18 Thread Chris Bannister
On Sat, Aug 15, 2015 at 01:48:15PM +0200, Sven Arvidsson wrote: > On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: > > - I have no control over the router (firmware updates? security > > fixes? I assume it's > > "really cheap" ...) > > I would start right there. If you can't get firmware updates,

Re: Security in our local network

2015-08-18 Thread Chris Bannister
On Mon, Aug 17, 2015 at 10:23:49AM +0900, Joel Rees wrote: > On Sat, Aug 15, 2015 at 6:59 PM, B. M. wrote: > > Hi list, > > > > - Not really a debian problem, but I value the knowledge of you all :-) > > Well, these are common technical problems that many of us face, and > some/many of the strate

Re: Security in our local network

2015-08-16 Thread Joel Rees
On Sat, Aug 15, 2015 at 6:59 PM, B. M. wrote: > Hi list, > > - Not really a debian problem, but I value the knowledge of you all :-) Well, these are common technical problems that many of us face, and some/many of the strategies and solutions are very much related to debian. > I'd like to get ex

Re: Security in our local network

2015-08-16 Thread rlharris
If you have an old spare machine, you can experiment easily and at no cost by making it a dedicated router/firewall. A good choice is IPCop, which almost anyone can install and configure in less than an hour. RLH

Re: Security in our local network

2015-08-16 Thread Sven Arvidsson
On Sun, 2015-08-16 at 10:09 +0200, B. M. wrote: > The router has to be used to access the cable network. And it get's > updates, but I don't have any control about it (e.g. I don't even > know about updates or security holes; there's no information at all). > So what I should do is buying anothe

Re: Security in our local network

2015-08-16 Thread David Wright
Quoting B. M. (b-m...@gmx.ch): > Le 15 août 2015 à 13:48, Sven Arvidsson a écrit : > > > On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: > >> - I have no control over the router (firmware updates? security > >> fixes? I assume it's > >> "really cheap" ...) > > > > I would start right there. If

Re: Security in our local network

2015-08-16 Thread B. M.
Le 15 août 2015 à 17:05, Martin Skjöldebrand a écrit : > On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: >> - Configure apache to require SSL client authentication - not yet >> possible because the >> owncloud sync client doesn't support that yet >> > > If I'm not totally confused the default

Re: Security in our local network

2015-08-16 Thread B. M.
Le 15 août 2015 à 13:48, Sven Arvidsson a écrit : > On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: >> - I have no control over the router (firmware updates? security >> fixes? I assume it's >> "really cheap" ...) > > I would start right there. If you can't get firmware updates, get rid > of it

Re: Security in our local network

2015-08-15 Thread Simon Brandmair
Hi, On 08/15/2015 12:00 PM, B. M. wrote: > - WLAN: SSID hidden, strong password, but I can't really trust the router, > can I ? Hidden SSID probably just gives you a wrong sense of security. See here [1] for example. Cheers, Simon [1] http://www.howtogeek.com/howto/28653/debunking-myths-is-hi

Re: Security in our local network

2015-08-15 Thread Martin Skjöldebrand
On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: > - Configure apache to require SSL client authentication - not yet > possible because the > owncloud sync client doesn't support that yet > If I'm not totally confused the default setting for owncloud is the connect through https:, I certainly h

Re: Security in our local network

2015-08-15 Thread Sven Arvidsson
Another thing to keep an eye on is WPS, Wi-Fi Protected Setup. It's quite easy to crack to gain the password. An informed user will turn off that feature. Except that some routers lie, and remains vulnerable. -- Cheers, Sven Arvidsson http://www.whiz.se PGP Key ID 6FAB5CD5 signature.asc Des

Re: Security in our local network

2015-08-15 Thread Joe
On Sat, 15 Aug 2015 07:34:55 -0400 Renaud (Ron) OLGIATI wrote: > On Sat, 15 Aug 2015 12:20:35 +0100 > Joe wrote: > > > A two-NIC firewall machine between the router and the rest of the > > network (presumably your mail server is wired to the router, it's > > only clients that are wireless) will

Re: Security in our local network

2015-08-15 Thread Sven Arvidsson
On Sat, 2015-08-15 at 11:59 +0200, B. M. wrote: > - I have no control over the router (firmware updates? security > fixes? I assume it's > "really cheap" ...) I would start right there. If you can't get firmware updates, get rid of it and replace it. Preferably with something that runs OpenWRT o

Re: Security in our local network

2015-08-15 Thread Ron
On Sat, 15 Aug 2015 12:20:35 +0100 Joe wrote: > A two-NIC firewall machine between the router and the rest of the > network (presumably your mail server is wired to the router, it's only > clients that are wireless) will do a lot to minimise any security > problems with the router, and give you d

Re: Security in our local network

2015-08-15 Thread Joe
On Fri, 14 Aug 2015 16:19:57 +0200 "B. M." wrote: > Hi list, > > - Not really a debian problem, but I value the knowledge of you > all :-) > > I'd like to get external input to my security considerations... > > Hardware / Network situation: > - Family in an apartment, several other apartments