(untitled)

1. How bad is it really if someone has your IP 2. Assuming one has a security based router, wouldn't the modem still be exposed to all attacks? How does it work? 3. What can one do to fully protect themselves? Any guides? Is a simple firewall that blocks unrequested incoming connections and closed ports enough? 4. Is a MITM attack possible even if the aforementioned is done?

>install openwrt there you go. beyond that someone can get the general area you live in.

>>22368 How bad is it really, though?

It's not. Here, come get me. If you are concerned about "unrequested incoming connections" you should look into how NAT and port forwarding work. tl;dr if a packet arrives and its destination is the WAN interface address of your router, how does the router know what LAN address to send it to? It doesn't, unless you defined a port forwarding rule for the port the packet is destined for, or the router currently has a NAT table entry matching the source and destination IP and port (plus protocol -- the "five-tuple"), the latter of which would not happen unless the connection were neither unrequested nor initiated from the outside. The reason companies and such need firewalls restricting access to various ports is because they actually have services bound to network interfaces accessible from the public internet and listening on those ports. They may not want everyone to be able to access those services, or they may want to do inspection of the traffic to/from those services in the application layers where they can look deeper than the source/destination IP/port and do URL filtering, virus scanning, data-loss prevention, intrusion detection/prevention, etc. Unless you have set up some kind of server on your computer and forwarded the relevant ports through your router (or you put your computer in the "DMZ" because you thought it sounded cool), there's no real reason why you would need a firewall to protect you against unsolicited inbound connections. They will simply have nowhere to go. What's most beneficial for most home PC scenarios is a software firewall on your computer that can use IP reputation (or whitelisting) to detect and block malware/spyware trying to phone home. (flood detected, post discarded, came to soykaf but only farted, how many retries will it take? One, two, three, four...)

>>22368 Can you please explain how openwrt helps in this case? >>22372 Good post. Thanks.

1. Not that bad... fbi.gov is at 104.16.149.244 are you gonna hack the FBI? 2. A modem is a modulator/demodulater it converts electrical signals to and from different cables like coax and ethernet it does nothing else so there isn't much to hack... but sure I guess you could hack it somehow 3. >Is a simple firewall that blocks unrequested incoming connections and closed ports enough? yes, yes it really is. It's actually common sense. 4. yes because you don't control every device on the internet between you and the remote domain you are connecting to. This is where common sense comes in again - https <- take note of that s at the end that means secure specifically secured with TLS. most browsers support only the latest versions of TLS which are much harder to break so again common sense strikes and says you should make sure your browser is up to date to assure you don't unnecessarily support older TLS versions with known exploits. of course, to support the latest browser you need the latest OS's. So update your OS as well. I personally don't know what your threat model is - but common sense security should cover 90% of use cases. As much as people on here like to LARP that there are feds posted outside their front door - The reality is most of all threats can be avoided with some common sense good security practice. oh and just because lainon did above: $ curl ifconfig.me 98.61.147.129 that is my IP address which pops up every time I log into an IRC channel as well. lainchan.org is seeing requests come from this IP address in the form of a POST right now.

>>22372 >What's most beneficial for most home PC scenarios is a software firewall on your computer that can use IP reputation (or whitelisting) to detect and block malware/spyware trying to phone home. Such as?

>>22377 Now I will go to every house in Minnesota to find you, and when i do I will give you a big hug. /s

>>22368 oh I forgot you could get ddosed, happens to streamers all the time >>22376 >Can you please explain how openwrt helps in this case? better security than built in soykafty os in the oem router your isp gives you, provided you set it up right and keep it up to date

Nobody can do nothing with your IP apart from find who might be selling you internet.