{"id":41,"date":"2012-05-24T18:26:50","date_gmt":"2012-05-24T18:26:50","guid":{"rendered":"http:\/\/thebrotherswisp.com\/?p=41"},"modified":"2012-05-24T18:26:50","modified_gmt":"2012-05-24T18:26:50","slug":"5-22-12-podcast-wisp-security","status":"publish","type":"post","link":"https:\/\/thebrotherswisp.com\/index.php\/5-22-12-podcast-wisp-security\/%","title":{"rendered":"5-22-12 Podcast – WISP Security"},"content":{"rendered":"

This episode has JJ Boyd<\/a>, Justin Wilson<\/a> and Myself(Greg Sowell<\/a>). Andrew<\/a> was unfortunately grabbing some much needed sleep.<\/p>\n

We talk loosely about WISP security, bonding multiple connections across the internet, and Ubiquiti open lower frequency channels.<\/p>\n

Talking points for the security section:<\/strong>
\nSecuring border router
\n + Router itself
\n + \u2022 Disable unused services. Lock down administrative access. Put reflexive rules in place.
\n + Access to publicly addressed assets inside
\n + \u2022 Block external admin access. Put reflexive rules in place.<\/p>\n

Securing towers
\n + Protect from clients
\n + \u2022 Towers should already be protected from outside access. Disable unused services. Lock down administrative access. Prevent clients from communication through tower.
\n + \u2022 Encrypt backhauls. Potential impact to Aps should be pretty low.<\/p>\n

Securing clients
\n + Protect from clients.
\n + \u2022 Disable unused services. Lock down administrative access.
\n + \u2022 Encrypt to clients. Why not?<\/p>\n

Securing administrative machines
\n + Protect dude server
\n + \u2022 Don\u2019t install on local machine. Keep it secured on a machine you don\u2019t surf the web from.
\n + Protect admin machines
\n + \u2022 Attempt to keep your work machine as clean as possible. Don\u2019t be the source of the problem.<\/p>\n

Links:<\/strong>
\nGregSowell training video on security.<\/a>
\nJustin’s thoughts on encryption.<\/a>
\nCIDR blocks by country.<\/a>
\nProgram to convert CIDR blocks to firewall entries for Mikrotik.<\/a>
\nClient isolation(found in this document).<\/a>
\nUbiquiti 5Ghz UNII-2 FCC Approval!<\/a>
\nSpeedtest mini<\/a><\/p>\n

Here’s the video:<\/strong>(if you don’t see it, hit refresh)
\n