[SATLUG] Deli owner wishes to set up own hotspot cheaply

[Samuel Leon]

David Power wrote:
>> Mary Yatti wrote:
>>     
>>> Hey guys,
>>>
>>>
>>> I'm looking for the most inexpensive way to set up
>>> free wifi for a deli in a rural area of Bandera.  It's
>>> near a resort and does lots of business.  The
>>> snowbirds are always looking for a hotspot to email
>>> their grandchildren, etc....  It's kinda funny because
>>> all these silverheads are addicted to the Internet.
>>>
>>> Any ideas gladly welcome.
>>>
>>> Mary
>>>       
>> Hi Mary:
>>
>> I think someone else already mentioned access, but if you do have
>> access, you are also going to want an access point with a guaranteed
>> strong signal.  I put in a link to an outdoor access point with a 400mw
>> (milli-watt) signal.  It makes things easier.  HTH, Dennis
>>
>> http://store.microcom.us/wireless-lan--access-point---client-bridge--
>> outdoor.html
>> --
>>     
>
> I've had problems with the engenius if you try to get a lot of data (10 meg
> +) that's encrypted (you do want to encrypt your data) through them. 
> If you are just using them to connect to a couple of meg uplink they work
> well and are very cost effective. 
> I've found that a pair of the 3220 ext make a nice inexpensive point to
> point backhaul platform. As long as you don't try to cram to much data
> through them.
>
>   


Speaking of security, I have a question.  Are there any 
applications/tools available to help prevent people from running ARP 
spoofing attacks inside a wireless lan?  I find that this is a common 
method for gathering user names and passwords.  There are many simple 
GUI apps out there that make these style of attacks/packet sniffing very 
easy to carry out.  There used to be a video on a website of a guy 
running ettercap and sniffing out user names and passwords from various 
SSL protected webmail sites.  I can't find the video now though.  It 
totally blew my mind the first time I saw it.  I am just wondering if 
there would be a way to automatically black list a MAC once it is 
detected to be running in promiscuous mode or something?  I am guessing 
that there would be no way to blacklist the *right* MAC once an ARP 
spoof attack has been detected? 

Anyone have any info on this?  I thought about running my own public 
hotspot before but I feel bad knowing that I wouldn't know how to 
properly protect my clients from such attacks.

Sam