5 things
A: set a wep Key (phone number works for 64 (40 bit))
B: hide ssid
C: Mac authentication
D: Turn off DHCP server and set internal subnet to 10.10.200.0/24
E: Ban their Mac address
This will go a long way towards discouraging the average bandwidth thief. This will not stop someone like me if I really wanted in. Best thing would be to upgrade encryption to AES. That is very hard to crack.
Rahl