[Gllug] wireless security for dummies

[Jan Minar]

On Fri, Dec 03, 2004 at 01:43:33PM +0000, Rich Walker wrote:
> Jack Bertram <jack at jbertram.net> writes:
> 
> You can enable MAC-address access control, where each machine's MAC
> address has to be added to the router's control page, but then every
> time you get a new machine you'll have to remember you did this, and you
> will forget.

# ip link set wifi0 address DE:AD:BE:EF:DE:AD

Pick a sniffed MAC of a currently dormant node, or shoot some active
node down (DoS attack), or simply share the MAC with an active node
(piggybacking; well, it's not *that* simple, but there are tools to do
the hard parts for you).

Static MAC-IP mappings help against certain attacks against switched
networks, but won't help you with your wireless security (much).

HTH.
-- 
 )^o-o^|    jabber: rdancer at NJS.NetLab.Cz
 | .v  K    e-mail: jjminar FastMail FM
 `  - .'     phone: +44(0)7981 738 696
  \ __/Jan     icq: 345 355 493
 __|o|__Minář  irc: rdancer at IRC.FreeNode.Net
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 240 bytes
Desc: not available
URL: <http://mailman.lug.org.uk/pipermail/gllug/attachments/20041204/032a2bb2/attachment.pgp>
-------------- next part --------------
-- 
Gllug mailing list  -  Gllug at gllug.org.uk
http://lists.gllug.org.uk/mailman/listinfo/gllug