LinuxQuestions.org
Welcome to the most active Linux Forum on the web.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Security
User Name
Password
Linux - Security This forum is for all security related questions.
Questions, tips, system compromises, firewalls, etc. are all included here.

Notices


Reply
  Search this Thread
Old 12-18-2010, 12:51 PM   #1
Patriot2135
LQ Newbie
 
Registered: Jul 2010
Posts: 11

Rep: Reputation: 1
Angry Invasion of Privacy from ISP


My ISP is actively monitoring its customer's activities. Specifically, uploads and downloads.
I am on a wireless router connected to a cable modem. The modem belongs to the ISP, the router is mine.
Currently, I am wired from the router to my LAN however, as you might guess, I am broadcasting a wireless connection (that I have recently secured).

I received a letter from my ISP accusing me of downloading copyrighted material. While this is not true there seems to be no way that I can convince them of it. I suspect that someone in my neighbourhood has piggy-backed my wireless connection and was using it to connect to the Internet.
My question is this: Is there any way that I can monitor the activity that is going through my router (a CISCO Linksys) and is there a way that I can keep my ISP out of my business?
My OS is Linux Mint 10.
Any advise would be greatly appreciated.
Thank you in advance
 
Click here to see the post LQ members have rated as the most helpful post in this thread.
Old 12-18-2010, 12:59 PM   #2
repo
LQ 5k Club
 
Registered: May 2001
Location: Belgium
Distribution: Arch
Posts: 8,529

Rep: Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899Reputation: 899
Quote:
Is there a way that I can keep my ISP out of my business?
Your ISP receives complaints from the owners from the copyright products.
They monitor the ptp filesharing, and will give the IP to your ISP, who will warn you.
So no, you can't keep your ISP out of your buisiness, and no, this is no
"Invasion of Privacy from ISP"

Kind regards
 
Old 12-18-2010, 01:52 PM   #3
Hangdog42
LQ Veteran
 
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,803
Blog Entries: 1

Rep: Reputation: 422Reputation: 422Reputation: 422Reputation: 422Reputation: 422
I think this is more a question of how have you secured your wireless? If you suspect someone in your neighborhood of using your LAN, shouldn't you take some steps to keep them out? If you'll detail how your wireless is (or is not) encrypted we can offer some advice.
 
1 members found this post helpful.
Old 12-18-2010, 05:43 PM   #4
devnull10
Member
 
Registered: Jan 2010
Location: Lancashire
Distribution: Slackware Stable
Posts: 572

Rep: Reputation: 120Reputation: 120
The onyl way really is to go through a proxy server but at the end of the day, if what you are doing is bad enough they will trace you whatever you use!
 
Old 12-19-2010, 01:52 AM   #5
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Quote:
Originally Posted by Hangdog42 View Post
I think this is more a question of how have you secured your wireless? If you suspect someone in your neighborhood of using your LAN, shouldn't you take some steps to keep them out? If you'll detail how your wireless is (or is not) encrypted we can offer some advice.
+1 from me.

Patriot2135, your priority needs to be putting a stop to the unauthorized access ASAP. Some might say that you're lucky to have only had an intruder interested in downloading pirated material. It could have been much, much worse (and still can be if you don't tighten things up). It sounds like you were either providing unrestricted access; using WEP; or using WPA/2 with a weak passphrase. In either case, switching to WPA2 with AES and a strong passphrase is highly recommended, while other less important measures such as MAC filtering should also be considered.

As for keeping your ISP out of your business, what kind of business are we talking about here? For example, I don't like my ISP being able to read my email, so I need to make sure I use SSL (HTTPS) whenever connecting to my Web-based email service. If you want to create a secure tunnel from your home network to a location beyond your ISP in order to keep them in the dark completely, there's many VPN service providers out there. Of course, if you've still got intruders in your home network, you'll likely be getting a letter from your VPN service provider too.

Last edited by win32sux; 12-19-2010 at 01:57 AM.
 
3 members found this post helpful.
Old 12-19-2010, 06:03 AM   #6
Patriot2135
LQ Newbie
 
Registered: Jul 2010
Posts: 11

Original Poster
Rep: Reputation: 1
Unhappy ISP monitoring customer traffic?

First let me say thank you all for responding so quickly.
I am new to this and I am still learning what it is to connect to the Internet through a wireless connection.
To address the question about the way that I am securing my wireless router.....before this incident I wasn't even aware that I needed to secure it.
I have since learned that by entering the IP address of the router into a browser I can manage and control how the router works. As I said, I am very new to all of this.

win32sux-To respond to your question, I am using WEP to secure the connection but until recently I did not include a passphrase at all. So, yes I was providing unsecured access and it sounds to me like I got real damn lucky. Since this incident I have read the owner's manual that came with the router, and while I don't understand everything about how to set up and secure my connection, at least I have created a pretty strong passphrase. Hopefully that will at least protect my LAN until I can learn more about how this wireless router thing works.
To address the question about what kind of business I am referring to, you addressed it. I don't like the idea of my ISP being able to read my email either. As far a what I download/upload, I don't really care. I don't have anything to hide there. They can monitor that all they want.
To be honest, I don't remember anything in the contract that I signed that said that I acknowledge that my ISP has the right to actively monitor my online activity. If in fact that is what is going on here?
Any help or advise that you can provide would be GREATLY appreciated.
I am sorry if I appear ignorant or naive. I'm afraid maybe I am in this regard.
Thank you again for your help.

Last edited by Patriot2135; 12-19-2010 at 06:10 AM.
 
Old 12-19-2010, 06:41 AM   #7
Hangdog42
LQ Veteran
 
Registered: Feb 2003
Location: Maryland
Distribution: Slackware
Posts: 7,803
Blog Entries: 1

Rep: Reputation: 422Reputation: 422Reputation: 422Reputation: 422Reputation: 422
Quote:
Originally Posted by Patriot2135
I am using WEP to secure the connection but until recently I did not include a passphrase at all.
One thing to realize is that WEP is almost as bad as having no encryption at all. There are tools widely available on the internet that are capable of cracking WEP encryption in a matter of minutes and those tools are so easy to use, anyone can do it. USing WEP is the equivalent of putting a "No Tresspassing" sign on your front door but leaving it unlocked. WEP establishes your intent to keep your network private but isn't any sort of an obstacle to access.

As win32sux suggested, you should switch immediately to WPA2/AES encryption and use a strong passphrase. You're looking for something that won't be found in a dictionary, and the longer the better. Mix in random letters, capitalization and numbers.

Quote:
Originally Posted by Patriot2135
Since this incident I have read the owner's manual that came with the router, and while I don't understand everything about how to set up and secure my connection, at least I have created a pretty strong passphrase. Hopefully that will at least protect my LAN until I can learn more about how this wireless router thing works.
This is a great first step, but if you are still using WEP, it is futile. The problem with WEP is a flawed algorithm, and because of this ANY passphrase is easily broken in WEP. Moving to WPA is critical. Please feel free to ask questions about your router, just be sure to tell us what it is. By the way, I would also change the administrator username and password on the router.
 
2 members found this post helpful.
Old 12-20-2010, 08:32 AM   #8
Steviepower
Member
 
Registered: May 2010
Location: Eindhoven
Distribution: ubuntu/debian
Posts: 152

Rep: Reputation: 25
then difference between WEP and no security at all is huge, 99% of the people don't know how to hack WEP. And hacking a wep accesspoint is usually illegal while connecting to an open accesspoint isn't(just blame your computer for connecting to it) But still, don't use wep cause if you know how to do it it will only cost you a few minutes to hack it.
if you don't want your isp to see what you're doing only download trough encrypted protocols (https/ssh/sftp/encrypted torrent connections+private trackers) this is not something that is easy to do but it's the way to keep your isp out of the contents of your traffic. ( http://torrentfreak.com/how-to-encry...rrent-traffic/ ) I'm a fan of privacy, lots of people don't know what is monitored by police/isp! but don't use it to do anything illegal with. encrypting all traffic isn't really possible, cause that would mean that the other party needs to be able to decrypt the connection. What you CAN do, (theoretically, probably not what you want) is to rent a server in a country you trust in not monitoring your internet connection and set up a vpn tunnel in a vpn enabeled router and route ALL your internet traffic trough there.
 
1 members found this post helpful.
Old 12-20-2010, 06:04 PM   #9
Patriot2135
LQ Newbie
 
Registered: Jul 2010
Posts: 11

Original Poster
Rep: Reputation: 1
Thanks for the information Hangdog2.
After reading through the posts to my original query I logged into my router again and went through the security settings.
The following are my current security settings as it pertains to the WEP/WPA2 etc.:
Wi-Fi Protected Setup Status: Configured
Network Name (SSID): ***********************
Security: WPA2 Personal
Encryption: TKIP or AES
Passphrase: ****************************

Asterisk's replace "Eyes Only" data. (for obvious reasons)
I have discovered that if I attempt to configure any security protocols beyond the above I loose my connection to the Internet. I am convinced that it is due to my ignorance regarding the correct security setup of the router. I just don't know what I am doing.
Thank you all again.
Your help is definitely appreciated.
 
1 members found this post helpful.
Old 12-20-2010, 10:19 PM   #10
win32sux
LQ Guru
 
Registered: Jul 2003
Location: Los Angeles
Distribution: Ubuntu
Posts: 9,870

Rep: Reputation: 380Reputation: 380Reputation: 380Reputation: 380
Are you doing this via the wireless network? This sort of thing should be done through the wired one. Otherwise, you're transmitting the new passphrase via the allegedly-penetrated network where it can be easily sniffed and you're back to square one. Also, you'd need to re-associate whenever you change the security protocol, passphrase, etc. Your loss of connectivity is probably due to that, given that none of those settings are related to the Internet side.
 
1 members found this post helpful.
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off



Similar Threads
Thread Thread Starter Forum Replies Last Post
LXer: The Android invasion cometh; is resistance futile? LXer Syndicated Linux News 0 10-26-2010 04:50 AM
LXer: On the Fridge: KDE Invasion in the Canary Islands LXer Syndicated Linux News 0 10-02-2007 04:50 AM
SMB type invasion...? politricks Linux - Security 9 03-02-2006 09:38 AM
anyone have UFO Alien Invasion working?? trey85stang Linux - Games 0 03-25-2004 06:09 PM
URGENT - How to stop M$ invasion satimis Linux - Software 11 09-23-2003 12:14 PM

LinuxQuestions.org > Forums > Linux Forums > Linux - Security

All times are GMT -5. The time now is 07:20 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
Open Source Consulting | Domain Registration