Re: How do you keep users from stealing other user's ip??

From: Eygene Ryabinkin <rea-fbsd@xxxxxxxxxxxxxxxxxx>
Date: Fri, 24 Mar 2006 13:48:59 +0300

To prevent users from MAC-spoofing - buy a switch with some kind of
"port-security". If you could lock down a port to just one MAC and have a
static ARP on the router it would be pretty hard to spoof the MAC-address. With
another MAC than the one associated with the port you simply will not be able
to talk to anyone.

No-no-no, it is _very_ easy to spoof MAC address. For FreeBSD it is just
'ifconfig em0 link 00:11:22:33:44:55'. Almost the same for Linux and
pretty easy for Windows. Port security would not prevent MAC spoofing --
you can not rely on the MAC provided by computer since it is easy to
determine one for the 'trusted' machine and set yours to that.
--
Eygene
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"

Follow-Ups:
- Re: How do you keep users from stealing other user's ip??
  - From: Duane Whitty

References:
- How do you keep users from stealing other user's ip??
  - From: Mark Jayson Alvarez
- Re: How do you keep users from stealing other user's ip??
  - From: Sten Daniel Sørsdal
- Re: How do you keep users from stealing other user's ip??
  - From: Jon Otterholm

Prev by Date: Re: How do you keep users from stealing other user's ip??
Next by Date: Re: How do you keep users from stealing other user's ip??
Previous by thread: Re: How do you keep users from stealing other user's ip??
Next by thread: Re: How do you keep users from stealing other user's ip??
Index(es):
- Date
- Thread

Relevant Pages

Re: Limit a childs time on computer
... If you have a router, see if it has options to allow/disallow connections (usually
by MAC address) at certain time; however, Windows XP lets users change their MAC address, so you
might want to see if access time can be restricted by the port to which the kid's computer is
connected but then you need to lockup the cable modem and router so the kid doesn't switch to another
port. ... (microsoft.public.windowsxp.general)
Re: Its War!
... they know which port is doing what. ... Then tying a MAC address to ...
if you can only log into the router for Internet, ... seemed like just another jack
in the wall like a phone jack. ... (microsoft.public.windowsxp.general)
Re: Mac hogging the internet on our network.
... U.S Robotics USR9003 2 port ADSL router ... The connection seems to be
significantly ... Do you get slowdown when the Mac is up and connected but logged out?
... If you plug the Mac straight into the ADLS router, ... (uk.comp.sys.mac)
Re: Linksys router
... ports, not the WAN/Internet port which is left unconnected." ... If you have
a hub between them, use standard cables. ... You have to realize that the router
is essentially three separate ... In this case you may need to use the MAC address spoofing
function ... (rec.crafts.metalworking)
Re: Wireless Network in Public Places Options
... and implement a static bridging table. ... >> allows traffic to one other
ethernet port, ... source MAC addresses. ... Packets with no destination
addresses such as broadcasts and DHCP ... (microsoft.public.win2000.networking)