Security Concern: Do I Need to Block IP?

Amie

Amie

Mac Convert for Life
I have a few questions regarding Internet security and IPs:

1. Would blocking my IP increase my security while browsing the 'Net?

2. If so, how can I block my IP?

3. What can people (hackers?) use IPs for? Can they get "into" your system if they know your IP address?

4. I always have personal sharing OFF and firewall ON. Is this enough for security?

Thanks for any help. I'm trying to understand these concepts on a more in-depth level.
 
You can't block your own IP. "IP blocking" is basically telling the computer not to accept any connections from a certain IP Address (every computer and device connected to the internet has a unique IP address). When you type in "google.com" and press enter, something called "DNS" takes over and converts "google.com" into something like "64.57.121.32", which is the actual IP address.

An IP address is a requirement if you're looking to connect to another machine -- just like a street address is a requirement if you wanna go to someone's house. If you don't know their exact street address but can remember where the house is, that's like "DNS." DNS just makes it easy for us, so we don't have to remember that 64.57.121.32 gets us to Google.com -- we just type "Google.com" and DNS takes care of the rest. If you don't want someone connecting to your machine from a certain IP address, you can block that IP address -- but for home systems, this usually isn't necessary unless you have a good reason.

It sounds like you're set up to be pretty secure already. I wouldn't worry too much about getting "hacked" -- I doubt the hackers out there would waste their time trying to hack your iBook to steal your family photos or Word documents -- that kind of stuff is useless to a hacker.
 
ElDiabloConCaca said:
You can't block your own IP. "IP blocking" is basically telling the computer not to accept any connections from a certain IP Address (every computer and device connected to the internet has a unique IP address). When you type in "google.com" and press enter, something called "DNS" takes over and converts "google.com" into something like "64.57.121.32", which is the actual IP address.

An IP address is a requirement if you're looking to connect to another machine -- just like a street address is a requirement if you wanna go to someone's house. If you don't know their exact street address but can remember where the house is, that's like "DNS." DNS just makes it easy for us, so we don't have to remember that 64.57.121.32 gets us to Google.com -- we just type "Google.com" and DNS takes care of the rest. If you don't want someone connecting to your machine from a certain IP address, you can block that IP address -- but for home systems, this usually isn't necessary unless you have a good reason.

It sounds like you're set up to be pretty secure already. I wouldn't worry too much about getting "hacked" -- I doubt the hackers out there would waste their time trying to hack your iBook to steal your family photos or Word documents -- that kind of stuff is useless to a hacker.
Click to expand...

Thanks a lot. That makes a heap of sense. Are you a teacher? You explained that very well. I have a better understanding of it now. Thank you!

I wasn't so much worried about a hacker hacking into my computer as I was just weirdos out there. For instance, when you go into a chat room and people can click on your name and see your IP, I wasn't sure how much information they could retrieve about you (phone number, home address, name, etc.). Lots of sickos out there. Gotta be careful.
 
I always have personal sharing OFF and firewall ON. Is this enough for security?' - personal sharing OFF is proper, firewall ON is not necessary - particularly if you have a router between your DSL / Cable modem (assumed), if not built into the modem, and computer(s).

Routers contain hardware firewalls, which are configurable via a web browser, and typically - better than (most) software firewalls. Yes, I do know that many would debate that last statement.
 
Dont worry your on a Mac ;)
you wanna see my network log:
May.05.2006 20:43:40 security:Session -- Prot: 17, 192.168.2.100:54045 > 65.32.22.16:52287 712074.507 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 86.13.226.17:59992 712074.492 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 69.84.109.238:40584 712074.508 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 24.43.147.191:13155 712074.502 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 81.216.192.154:23484 712074.498 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 68.149.246.117:19852 712074.506 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 213.49.180.92:1177 712074.494 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17, ***.***.***.*** > 88.152.212.221:27077 712074.491 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17,***.***.***.*** > 172.143.165.92:42597 712077.552 ~ 712203.219 size 57/46 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17, ***.***.***.*** > 88.100.142.39:6120 712074.496 ~ 712203.219 size 156/45 time-out
May.05.2006 20:43:48 security:712210.625 Blocked Prot=6, 81.159.158.88:3322 > 81.159.199.59:135, S Seq=1158838346, Ack=0 -Disallowed Destination IP
May.05.2006 20:43:50 security:Session -- Prot: 1, 88.111.11.234:3 > ***.***.***.*** 712207.774 ~ 712213.218 size 112/0 time-out
May.05.2006 20:43:50 security:Session -- Prot: 17, ***.***.***.***> 72.20.138.251:23940 712087.475 ~ 712213.218 size 59/46 time-out
May.05.2006 20:43:50 security:Session -- Prot: 17, ***.***.***.*** > 68.107.59.29:36289 712086.292 ~ 712213.218 size 61/46 time-out
May.05.2006 20:43:51 security:712213.593 Blocked Prot=6, 81.159.158.88:3322 > 81.159.199.59:135, S Seq=1158838346, Ack=0 -Disallowed Destination IP
Click to expand...
 
I see you have airport make sure it has encryption such as MAC address filtering (Like an ip address every computer has a unique one) you type all of your computers mac address's in the airport's configuriation system.
 
Just because you're on a Mac doesn't mean that a good hacker couldn't crack into your Mac. It's not as easy since it's Unix, but it is still possible.

As for encryption, WEP is better than nothing but it's not very secure. Stick with WPA or WPA2 if your Airport card and basestation support it (which they should if they're relatively new).

MAC filtering (which means that the basestation will only allow the MAC, or Media Access Control, address from the network card or wireless card that is on its list of allowed cards) helps but can become tedious especially if you have someone visiting and they want to use your wireless connection. This means that you would have to go into your basestation configuration and add the MAC address of that computer's wireless card. Not something even I as a computer geek want to spend time doing.

FYI, the MAC address of a network card looks something like this:
00:90:4B:4D:64:17

That's actually the MAC address of my wireless card on my work laptop.
 
I don't have a base station or router. I don't use my laptop at home. I mostly use it at public hotspots.
 
Thus, based on the newly provided information of 'I mostly use it (the iBook) at public hotspots', then the answer to 'I always have personal sharing OFF and firewall ON. Is this enough for security?' is yes.
 
I concur with barhar. Make sure your firewall is on and that you're not sharing anything. And even though it might seem a bit paranoid, disable Bluetooth if your iBook supports it.
 
You may also want to click on the Advanced tab in
SystemPreferences/Sharing/Firewall and select
Block UDP Traffic and Enable Stealth Mode.
 
g/re/p said:
You may also want to click on the Advanced tab in
SystemPreferences/Sharing/Firewall and select
Block UDP Traffic and Enable Stealth Mode.
Click to expand...
Huh? lol What the heck does THAT do?

EDIT: You know what? It doesn't matter in my case. I just checked System Preferences/Sharing and I don't have an Advanced tab at all. When I click on System Preferences and then click on Sharing, the only options are: Personal Sharing, Firewall and Internet. No Advanced tab in any of said options.
 
g/re/p said:
Huh? lol - Click on Firewall, and then click on Advanced.
Click to expand...
I read your post the first time. lol And, again, I'm telling you: I don't HAVE an Advance tab in Firewall preferences. Maybe you're using a different OS than me. The only options I have under System Preferences/Sharing/Firewall are a list of things (ports) to check in order to open/close sharing/firewall ... and then there is a "New," "Edit," and "Delete" option. THAT'S IT. No Advance tab.
 
Oh. ok lol - i guess you are going to get hacked!

Hehe - not really - i failed to notice you were not
running 10.4 Tiger, which does have that function.
 
g/re/p said:
Oh. ok lol - i guess you are going to get hacked!

Hehe - not really - i failed to notice you were not
running 10.4 Tiger, which does have that function.
Click to expand...
Nope. Not me! Got my firewall on and sharing off. I'm all wrapped up in a safety blanket.

*pulls blanket over her head*
 
You must log in or register to reply here.
Back
Top