>> use MAC address filtering and a firewall, and I do not broadcast my ESSID. > > Correct, then for the best security, use Personal WPA2 with AES. Be aware that if you don't broadcast the SSID and use WPA2/AES, any Windows clients will need WinXP SP3 in order to connect well. (Which isn't a bad thing, anyway.) sjm