WiFi Network - odd behaviour

Hello all,
Before I begin let me confirm that I've followed all standard WiFi security steps outlined in the sticky threads in this forum. These include hiding my SSID, applying MAC address filtering on my router to only allow confirmed MAC addresses access, enabling WPA2-PSK encyption and creating a very secure password.

My model of router has a dome of LEDs mounted on it that indicate when Wireless connections are incoming/outgoing and which of the router's multiple antennas are in use. These LEDs do not illuminate when not in use. I have noticed that these LEDs are illuminated even when ALL wireless devices (including phones, television etc.) in the house are completely powered off, even unplugged.

This would indicate activity from an external, non-authorised source.

Secondly, one of my PCs repeatedly loses its WiFi connection. The connection can be reestablished simply by clicking the Windows WiFi-status icon in the quicklaunch menu and clicking once on the name of my Wireless network in the list of networks. This causes Windows to reconnect to the network. Is it common for Wireless client devices to drop their connection to the router? All drivers have been tried, installed and reinstalled, this issue persists.

Two questions: What possible means of access could an advanced hacker use to bypass my Wireless security settings, allowing them to use my router and/or intercept my use of it. Could it be as sophisticated as a remote reinstall of custom firmware on the router? If it's not this sophisticated where might I identify IPs connected to the router without using the router's GUI (which assures me only authorised machines are using the router). Question 2: What can be done to resolve the constant Wireless access disconnects on one of the client PCs on my network?

Your assistance much appreciated.
 

RealBeast

Titan
Moderator
Hiding your SSID and using MAC addressing are really not useful for security if the person making the attempt has any skill level.

I would not assume that the lights are indicating a hacker penetrated, but the method that they would have used could not have gotten through WPA2 -- it would have been a side door attack on the WPS pin code using Reaver.

I would insure that WPS is disabled on your router, then reset your WPA2 passkey.

The disconnect issue may not be related, could just be interference from other nearby networks or devices. Take a look at the local wireless frequency that you use for channels and strengths with the free inSSIDer from HERE.
 
My thanks for your leads, RealBeast.

My router doesn't have WPS. I've reset my passkey many, many times.

According to inSSIDer 3 my WiFi network is not overlapping any other networks, although I am within close frequency range of another network.

Are there any other possible causes? Just today I had to reset my router twice to get the client PC to establish a connection with it. The client PC can always 'see' my home network, but almost always fails at connecting without the removal/reattaching of the client wireless antenna or the powering off and then on again of the home router. Furthermore, if the internet is left idle for more than 5 minutes or so the client PC's connection drops almost always requiring the above process of powering off/on or removal/reattaching of the antenna to take place.

Any further advice would be useful.
 

RealBeast

Titan
Moderator
What model router do you have? What adapter does the client have?

What kind of signal strength do you get where your device is usually located?

It is somewhat suspicious that removal/replacement of the client antenna would fix the problem if it is not a problem on the client end. Are all power saving options for the wireless disabled on the client?