View original (French)

Question Pix Catalina

Mams13 -  
yg_be Posted messages 23437 Registration date   Status Contributeur Last intervention   -

Hello.

Who succeeded in this question on Pix?

"Catalina realized that unknown devices are connecting to her network while she only has two devices (a laptop and a smartphone).
Configure the internet box below to:
allow network access only to Catalina's two devices,
maximize security."

I changed the network name and its password, but not the channel (6).

I set WPA2 Personal, disabled WPS, enabled MAC filtering by allowing Catalina's 2 addresses, disabled DHCP, enabled guest network, used the Cloudflare DNS server addresses 1.1.1.1 and Cloudflare 1.0.0.1 without enabling DNS cache, changed the admin password, and activated parental controls by blocking access for the 2 devices that are not Catalina's.

For parental control on Catalina's 2 devices, I set always allow for her computer and blocked 3 sites for her smartphone. Maybe it needs optimization at this level.

Despite all this, I still haven't succeeded in the question. Need help please, thank you!!!

Windows / Chrome 124.0.0.0

3 réponses

Réponse 1 / 3
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 420
 

Hello,

hide the SSID(s)?

And there you go, there you have it ....

But misery, how annoying the line spacing is!!
2
Mams13
 

Hello.

No, it's not possible in the options.

0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 420 > Mams13
 

These tests are really stupid ... :-(

0
Réponse 2 / 3
yg_be Posted messages 23437 Registration date   Status Contributeur Last intervention   Ambassadeur 1 587
 

Hello,

I don't see how disabling DNS caching and the DHCP server contribute to security.

And I think it's better to disable the guest network.
0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 420
 

The DHCP server can help delay an intrusion while the "visitor" finds the right IP network, but if IPv6 is enabled, they will still receive router RAs and connect to the network via IPv6.

The guest network is supposed to be isolated; it's like connecting to the neighbor's network, except that on the internet, it's our address that is seen.

0
Mams13
 

Hello.

The cache is disabled by default.

We can check "enable DNS cache" but I haven't done that.

So you advise me to disable DHCP but not to enable the guest network?

And for parental control, is it a good thing to enable it?

Thank you.

0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 420 > Mams13
 

Parental control does not intervene in security, since it filters in the other direction: from the inside out, and children's devices are allowed, but at certain times.

1
Mams13 > brupala Posted messages 111942 Registration date   Status Membre Last intervention  
 

Okay, thank you.

And for the DNS cache and the guest network, should they be enabled or not?

Did I do well to select two Cloudflare DNS server addresses instead of leaving it on automatic?

0
brupala Posted messages 111942 Registration date   Status Membre Last intervention   14 420 > Mams13
 

The guest network is when we need it (for people passing through who need to connect).

The DNS and the resolver's cache, if it's the router, have no influence on security; in fact, the router is rather transparent in this role.

0
Réponse 3 / 3
Mams13
 

Hello.

I still haven't managed to validate this Pix question.

So, I'm wondering another question: does changing the wifi channel of the box increase security?

I already know that it helps to solve intermittent signals and optimize a wireless connection.

Thank you for your help.
0
yg_be Posted messages 23437 Registration date   Status Contributeur Last intervention   1 587
 

no

0