Some DBag's leaching my internet

[Trainwreck2100]

Is there anyway to with him before i just unplug my wireless?

[balli]

I have no idea how to run these commands, but... Show no mercy if you do.
http://www.ex-parrot.com/pete/upside-down-ternet.html

Upside-Down-Ternet

My neighbours are stealing my wireless internet access. I could encrypt it or alternately I could have fun.
Split the network

I'm starting here by splitting the network into two parts, the trusted half and the untrusted half. The trusted half has one netblock, the untrusted a different netblock. We use the DHCP server to identify mac addresses to give out the relevant addresses.
/etc/dhcpd.conf

ddns-updates off;
ddns-update-style interim;
authoritative;

shared-network local {

subnet *.*.*.* netmask 255.255.255.0 {
range *.*.*.* *.*.*.*;
option routers *.*.*.*;
option subnet-mask 255.255.255.0;
option domain-name "XXXXX";
option domain-name-servers *.*.*.*;
deny unknown-clients;

host trusted1 {
hardware ethernet *:*:*:*:*:*;
fixed-address *.*.*.*;
}
}

subnet 192.168.0.0 netmask 255.255.255.0 {
range 192.168.0.2 192.168.0.10;
option routers 192.168.0.1;
option subnet-mask 255.255.255.0;
option domain-name-servers 192.168.0.1;
allow unknown-clients;

}
}


IPtables is Fun!

Suddenly everything is kittens! It's kitten net.

/sbin/iptables -A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp -j DNAT --to-destination 64.111.96.38

For the uninitiated, this redirects all traffic to kittenwar.

For more fun, we set iptables to forward everything to a transparent squid proxy running on port 80 on the machine.

/sbin/iptables -A PREROUTING -s 192.168.0.0/255.255.255.0 -p tcp -m tcp --dport 80 -j DNAT --to-destination 192.168.0.1

That machine runs squid with a trivial redirector that downloads images, uses mogrify to turn them upside down and serves them out of it's local webserver.
The redirection script

#!/usr/bin/perl
$|=1;
$count = 0;
$pid = $$;
while (<>) {
chomp $_;
if ($_ =~ /(.*\.jpg)/i) {
$url = $1;
system("/usr/bin/wget", "-q", "-O","/space/WebPages/images/$pid-$count.jpg", "$url");
system("/usr/bin/mogrify", "-flip","/space/WebPages/images/$pid-$count.jpg");
print "http://127.0.0.1/images/$pid-$count.jpg\n";
}
elsif ($_ =~ /(.*\.gif)/i) {
$url = $1;
system("/usr/bin/wget", "-q", "-O","/space/WebPages/images/$pid-$count.gif", "$url");
system("/usr/bin/mogrify", "-flip","/space/WebPages/images/$pid-$count.gif");
print "http://127.0.0.1/images/$pid-$count.gif\n";

}
else {
print "$_\n";;
}
$count++;
}

Then the internet looks like this!

And it just a shows a bunch of pictures where their browser screen is jacked.

[Slydragon]

I have no idea how to run these commands, but... Show no mercy if you do.
http://www.ex-parrot.com/pete/upside-down-ternet.html


And it just a shows a bunch of pictures where their browser screen is jacked.

That's funny, I would do the blur and make him think his pc/screen is messing up. They also may not even be using a pc they could be on a PS3 and playing online or a PSP/Nintendo DS. So it may not work.

[Slydragon]

You could also limit the download speed on the router when you are not using it (56kb) so if he is playing online he will lag and get booted and if he is on his pc it will take forever to load web pages.

[DannyT]

find out what ip he is using and try to see if he has any open shares that you can get into...sometimes dumbasses share out their C$ and do dumb like connect to that doesnt belong to them...in that case you can browse his box and find all kinds of goodies...like him and his wifes last porno or what not....it surprises me how smart mutha ers think they are but ended up ing themselves.


but as sly said he could be on an iphone,psp, or a console and it wont work....hurry up and have fun with him kick him off and lockdown your network he could be doing some to you...its never truely locked just like your front door can be busted down your network can have the same thing happen but a locked dorr makes it that much harder.

[PM5K]

You left it open, why are you complaining that he's on it?

[DannyT]

True true

[baseline bum]

LMAO@ballijuana's suggestion. Gotta use linux or *BSD if you want iptables though. Gotta save that post for April 1st.