1. Immediately change "admin" password (use a foreign word, misspell it, upper/lower case, include numbers)
2. Make the SSID difficult to hack
2a. Then, disable SSID broadcast (wireless devices can still connect, but they will need to know the exact SSID)
3. Enable MAC authentication
4. Enable highest security available (e.g., WPA2, etc.)
5. Make the passphrase as difficult to guess/hack as the admin password
6. Do not enable DMZ port in WAN setup
7. Do not enable "Automatic connection" in WAN setup
7a. Do not enable "Remote configuration" or "Remote control"
8. Do not enable "Respond to PING" in WAN setup (this is how you are "found")
9. Enable "Secure" for NAT filtering in WAN setup
All the above can still be circumvented by someone who knows what they are doing and with the right technology. Imagine how easy it is if you leave the router in default or "simple" mode.
10. Right-click on ALL your PC's "My Computer," select "Properties," select "Remote" tab and DO NOT enable "Allow Remote-Assistance"
2. Make the SSID difficult to hack
2a. Then, disable SSID broadcast (wireless devices can still connect, but they will need to know the exact SSID)
3. Enable MAC authentication
4. Enable highest security available (e.g., WPA2, etc.)
5. Make the passphrase as difficult to guess/hack as the admin password
6. Do not enable DMZ port in WAN setup
7. Do not enable "Automatic connection" in WAN setup
7a. Do not enable "Remote configuration" or "Remote control"
8. Do not enable "Respond to PING" in WAN setup (this is how you are "found")
9. Enable "Secure" for NAT filtering in WAN setup
All the above can still be circumvented by someone who knows what they are doing and with the right technology. Imagine how easy it is if you leave the router in default or "simple" mode.
10. Right-click on ALL your PC's "My Computer," select "Properties," select "Remote" tab and DO NOT enable "Allow Remote-Assistance"