Security Concern: Do I Need to Block IP?

[Amie]

I have a few questions regarding Internet security and IPs:

1. Would blocking my IP increase my security while browsing the 'Net?

2. If so, how can I block my IP?

3. What can people (hackers?) use IPs for? Can they get "into" your system if they know your IP address?

4. I always have personal sharing OFF and firewall ON. Is this enough for security?

Thanks for any help. I'm trying to understand these concepts on a more in-depth level.

[ElDiabloConCaca]

You can't block your own IP. "IP blocking" is basically telling the computer not to accept any connections from a certain IP Address (every computer and device connected to the internet has a unique IP address). When you type in "google.com" and press enter, something called "DNS" takes over and converts "google.com" into something like "64.57.121.32", which is the actual IP address.

An IP address is a requirement if you're looking to connect to another machine -- just like a street address is a requirement if you wanna go to someone's house. If you don't know their exact street address but can remember where the house is, that's like "DNS." DNS just makes it easy for us, so we don't have to remember that 64.57.121.32 gets us to Google.com -- we just type "Google.com" and DNS takes care of the rest. If you don't want someone connecting to your machine from a certain IP address, you can block that IP address -- but for home systems, this usually isn't necessary unless you have a good reason.

It sounds like you're set up to be pretty secure already. I wouldn't worry too much about getting "hacked" -- I doubt the hackers out there would waste their time trying to hack your iBook to steal your family photos or Word documents -- that kind of stuff is useless to a hacker.

[Amie]

Originally Posted by ElDiabloConCaca

You can't block your own IP. "IP blocking" is basically telling the computer not to accept any connections from a certain IP Address (every computer and device connected to the internet has a unique IP address). When you type in "google.com" and press enter, something called "DNS" takes over and converts "google.com" into something like "64.57.121.32", which is the actual IP address.

An IP address is a requirement if you're looking to connect to another machine -- just like a street address is a requirement if you wanna go to someone's house. If you don't know their exact street address but can remember where the house is, that's like "DNS." DNS just makes it easy for us, so we don't have to remember that 64.57.121.32 gets us to Google.com -- we just type "Google.com" and DNS takes care of the rest. If you don't want someone connecting to your machine from a certain IP address, you can block that IP address -- but for home systems, this usually isn't necessary unless you have a good reason.

It sounds like you're set up to be pretty secure already. I wouldn't worry too much about getting "hacked" -- I doubt the hackers out there would waste their time trying to hack your iBook to steal your family photos or Word documents -- that kind of stuff is useless to a hacker.

Thanks a lot. That makes a heap of sense. Are you a teacher? You explained that very well. I have a better understanding of it now. Thank you!

I wasn't so much worried about a hacker hacking into my computer as I was just weirdos out there. For instance, when you go into a chat room and people can click on your name and see your IP, I wasn't sure how much information they could retrieve about you (phone number, home address, name, etc.). Lots of sickos out there. Gotta be careful.

[barhar]

I always have personal sharing OFF and firewall ON. Is this enough for security?' - personal sharing OFF is proper, firewall ON is not necessary - particularly if you have a router between your DSL / Cable modem (assumed), if not built into the modem, and computer(s).

Routers contain hardware firewalls, which are configurable via a web browser, and typically - better than (most) software firewalls. Yes, I do know that many would debate that last statement.

[CJ MAC OSX IPOD]

Dont worry your on a Mac
you wanna see my network log:

May.05.2006 20:43:40 security:Session -- Prot: 17, 192.168.2.100:54045 > 65.32.22.16:52287 712074.507 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 86.13.226.17:59992 712074.492 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 69.84.109.238:40584 712074.508 ~ 712203.218 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 24.43.147.191:13155 712074.502 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 81.216.192.154:23484 712074.498 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 68.149.246.117:19852 712074.506 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:40 security:Session -- Prot: 17, ***.***.***.*** > 213.49.180.92:1177 712074.494 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17, ***.***.***.*** > 88.152.212.221:27077 712074.491 ~ 712203.219 size 52/45 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17,***.***.***.*** > 172.143.165.92:42597 712077.552 ~ 712203.219 size 57/46 time-out
May.05.2006 20:43:41 security:Session -- Prot: 17, ***.***.***.*** > 88.100.142.39:6120 712074.496 ~ 712203.219 size 156/45 time-out
May.05.2006 20:43:48 security:712210.625 Blocked Prot=6, 81.159.158.88:3322 > 81.159.199.59:135, S Seq=1158838346, Ack=0 -Disallowed Destination IP
May.05.2006 20:43:50 security:Session -- Prot: 1, 88.111.11.234:3 > ***.***.***.*** 712207.774 ~ 712213.218 size 112/0 time-out
May.05.2006 20:43:50 security:Session -- Prot: 17, ***.***.***.***> 72.20.138.251:23940 712087.475 ~ 712213.218 size 59/46 time-out
May.05.2006 20:43:50 security:Session -- Prot: 17, ***.***.***.*** > 68.107.59.29:36289 712086.292 ~ 712213.218 size 61/46 time-out
May.05.2006 20:43:51 security:712213.593 Blocked Prot=6, 81.159.158.88:3322 > 81.159.199.59:135, S Seq=1158838346, Ack=0 -Disallowed Destination IP

[CJ MAC OSX IPOD]

I see you have airport make sure it has encryption such as MAC address filtering (Like an ip address every computer has a unique one) you type all of your computers mac address's in the airport's configuriation system.

[nixgeek]

Just because you're on a Mac doesn't mean that a good hacker couldn't crack into your Mac. It's not as easy since it's Unix, but it is still possible.

As for encryption, WEP is better than nothing but it's not very secure. Stick with WPA or WPA2 if your Airport card and basestation support it (which they should if they're relatively new).

MAC filtering (which means that the basestation will only allow the MAC, or Media Access Control, address from the network card or wireless card that is on its list of allowed cards) helps but can become tedious especially if you have someone visiting and they want to use your wireless connection. This means that you would have to go into your basestation configuration and add the MAC address of that computer's wireless card. Not something even I as a computer geek want to spend time doing.

FYI, the MAC address of a network card looks something like this:
00:90:4B:4D:64:17

That's actually the MAC address of my wireless card on my work laptop.

[Amie]

I don't have a base station or router. I don't use my laptop at home. I mostly use it at public hotspots.