Ryan
(for instance) http://home.jwu.edu/jwright/papers/wlan-mac-spoof.pdf
Alex Martin wrote:
In shorewall, it is simple to use mac addresses for firewalling.
In /etc/shorewall/rules, to accept say ftp from the net to a server in the dmz:
ACCEPT net dmz tcp 21
But, say you want only a specific host to have ftp access, say your buddy, who has some mac like 02:00:08:E3:FA:58 (for example) then your rule is:
ACCEPT net:~02:00:08:E3:FA:55 dmz tcp 21
(without using mac's you use IP's like so:)
ACCEPT net:12.32.43.56 dmz tcp 21
Or for a specified-by-mac dmz server,
ACCEPT net:~02:00:08:E3:FA:55 dmz:~05:22:08:G3:FB:45 tcp 21
Etc. Thus, you have unspoofable (I am pretty sure, any one correct me?) firewalling.
See http://shorewall.net/configuration_file_basics.htm
Regards,
Alex Martin http://www.rettc.com
------------------------------------------------------- This SF.net email is sponsored by: IBM Linux Tutorials. Become an expert in LINUX or just sharpen your skills. Sign up for IBM's Free Linux Tutorials. Learn everything from the bash shell to sys admin. Click now! http://ads.osdn.com/?ad_id=1278&alloc_id=3371&op=click ------------------------------------------------------------------------ leaf-user mailing list: [EMAIL PROTECTED] https://lists.sourceforge.net/lists/listinfo/leaf-user SR FAQ: http://leaf-project.org/pub/doc/docmanager/docid_1891.html
