Best Security,Privacy & Performance Practices !

[mahadevan_iyer]

I have changed certain configurations after getting new BSNL FTTH connection. Mainly for security, privacy & performance.

1. Changed my login & password credentials to router configuration.
2. Changed Wifi password. ( earlier it was 123456 )
3. Changed SSID.
3. Changed DNS Server to 1.1.1.1 & 1.0.0.1 ( Cloudflare DNS ) in router configuration.
4. Changed DNS Server in Windows 10 Wifi Adapter to Cloudflare for both IPv4 & IPv6.
5. Changed Wifi Channel to Channel 11 ( as per my network scanner ).
6. Disabled uPnp in router.
7.Changed MTU to 1500. Followed this link & optimized MTU.
8. Downloaded & Installed FING for WIndows 10 & Weenet for Android to find who is stealing my Internet.
9. Use "HTTPS Everywhere" & "uBlock Origin" extension in Chrome browser.
10. Use Tunnelbear VPN only when required.

Am I missing anything ?

 

[Sushubh]

Get encrypted dns. Use Firefox. Turn on ESNI.

 

[vishalrao]

Why mtu 1500?

 

[mahadevan_iyer]

Larger MTU is associated with reduced overhead. Smaller MTU values can reduce network delay. In many cases, MTU is dependent on underlying network capabilities and must be adjusted manually or automatically so as to not exceed these capabilities. MTU parameters may appear in association with a communications interface or standard. Some systems may decide MTU at connect time.

Via Wikipedia ( Maximum transmission unit - Wikipedia )

Larger Packet size.

Don't know the change is significant.

Every website I browse is rendering well on 1500 MTU.

 

[vishalrao]

OK. reason why I asked is some people faced website loading issues and speed issues and it was fixed by lowering MTU.... I myself have set my MTU to 1400 even though I was not facing issues with default setting of 1500.

 

[sloj]

@mahadevan_iyer I had an issue where I changed something on my internet profile in ONU and MTU defaulted to 1492 which I didn't notice. Did a speedtest and the ONU crashed every time when uploading test started. So it's better to find the optimal value and set it. Just a reminder, MRU is for receiving and MTU is for sending. Finding MTU.

 

---

[mahadevan_iyer]

If I follow this I get this.

Shall I change MTU from 1500 to 1422 ?

PS C:\WINDOWS\system32> ping www.yahoo.com -f -l 1500

Pinging new-fp-shed.wg1.b.yahoo.com [202.165.107.49] with 1500 bytes of data:
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 202.165.107.49:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PS C:\WINDOWS\system32> ping www.yahoo.com -f -l 1450

Pinging new-fp-shed.wg1.b.yahoo.com [202.165.107.49] with 1450 bytes of data:
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 202.165.107.49:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PS C:\WINDOWS\system32> ping www.yahoo.com -f -l 1425

Pinging new-fp-shed.wg1.b.yahoo.com [202.165.107.49] with 1425 bytes of data:
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 202.165.107.49:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PS C:\WINDOWS\system32> ping www.yahoo.com -f -l 1423

Pinging new-fp-shed.wg1.b.yahoo.com [202.165.107.49] with 1423 bytes of data:
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.
Packet needs to be fragmented but DF set.

Ping statistics for 202.165.107.49:
    Packets: Sent = 4, Received = 0, Lost = 4 (100% loss),
PS C:\WINDOWS\system32> ping www.yahoo.com -f -l 1422

Pinging new-fp-shed.wg1.b.yahoo.com [202.165.107.49] with 1422 bytes of data:
Reply from 202.165.107.49: bytes=1422 time=80ms TTL=52
Reply from 202.165.107.49: bytes=1422 time=221ms TTL=52
Reply from 202.165.107.49: bytes=1422 time=79ms TTL=52
Reply from 202.165.107.49: bytes=1422 time=130ms TTL=52

Ping statistics for 202.165.107.49:
    Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
    Minimum = 79ms, Maximum = 221ms, Average = 127ms

 

[mahadevan_iyer]

Is MTU, Router dependent? Location dependent? Line dependent ? or Device-dependent?

Does this value stay the same or should I change this every time?

 

[GKannan]

@mahadevan_iyer It depends on the connection protocol eg. PPPoE, VPN tunnel

The standard MTU is 1500, so the protocol's MTU is calculated by 1500 - Protocol overhead

 

[mahadevan_iyer]

I have changed my MTU size from 1500 to 1450 ( 1422 + 28 ). Tested the speed. Not much different. Everything working fine.

I am using 20 MBPS connection.
I got 25 Mbps for both upload & download in Ookla.
I got 22 Mbps in download & 19 Mbps in upload in Fast.com.