Re: ZABRAVETE ZA MAC FILTRIRANE Re: Re: lug-bg: MAC+IP

[teodor@xxxxxxxxxxxxxxx (Teodor Georgiev)]

viarno e.
mnogo lesno se smenia MAC adres.
eto primer:

ifconfig eth0 hw ether 00:00:00:00:00:00...

obache...
eto slednata shema:

admina dava  iptables -P FORWARD DROP
sled tova pootdelno za vsiaka karta si razreshava trafika...

meniai si MAC-a koooooooooooooolkoto iskash...

----- Original Message -----
From: "Ivan Dimitrov" <dobber@xxxxxxxxxx>
To: <lug-bg@xxxxxxxxxxxxxxxxxx>
Sent: Thursday, November 29, 2001 4:00 PM
Subject: ZABRAVETE ZA MAC FILTRIRANE Re: Re: lug-bg: MAC+IP

> 1) vednuj setnesh li s `arp -s MAC IP` tova ne e dinamichno ami si ostava
> i ot tam natatuk prosto nqma nachin da vlezes s drug MAC adres. blokva
> vsichko. obiknovenno tozi skript se slaga v rc. failovete pri bootvane da
> si zaredi tablicata s  ip - mac adresi.
>
> 2) ako obichate zabravete za filtrirane po MAC adres. ot izvestno vreme
> proizvoditelite na eth karti:) sa si dobavili vuzmojnost za promqna na MAC
> adresi, az lichno sum vijdal mac adres 00:00:00:00:00:kolkoto:trqbva:nuli
> i ne e problem da se smeni mac adres i ip-to. stava za sekundi:) nachina
> koito mi podskazaxa togava i koito ne sum iztestval e s vpn, ako nqkoi ima
> opit za takuv vid authentifikacia neka da pishe:)))
>
>
>    Ivan Dimitrov
> System Administrator
>   Bastun Networks
>
> On Thu, 29 Nov 2001, Todor Belev wrote:
>
> > Imenno tova pitah,
> > tova znachi che ako ne pravish proverka chesto za tova dali
> > ima avtomatichno dobaveni entryta v ARP tablicata , az ot
> > strna na "hitrec" shte moga da si smenia IP-to i da rabotia
> > do sledvashtia pyt kogato si pochistish dinamichno
> > dobavenoto entry (t.e. pri restart na mashinata).
> > Ako tova se pravi na 1 minuta (t.e. flushvane na dinamichno
> > dobavenite zapisi v ARP tablicata) az pyk moga da si
> > napravia script s koito dinamichno si promeniam IP to da
> > kajem na vremeto na koeto ti pochistvash tablicata.
> > Za tova mi beshe vyrposa za niakakyv trik s koito shet
> > mojesh izcialo da zabranish dinamichnoto dobaviane na
> > entryta v ARP tablicata.
> >
> > Todorin
> >
> >
> >
> >
> > >-------- Îðèãèíàëíî ïèñìî --------
> > >Îò:  <owner-lug-bg@xxxxxxxxxxxxxxxxxx>
> > >Îòíîñíî: Re: lug-bg: MAC+IP
> > >Äî : <lug-bg@xxxxxxxxxxxxxxxxxx>
> > >Èçïðàòåíî íà: 29.11.2001 16:18:45
> > >-----------------------------------
> > >
> > >On Thu, 29 Nov 2001 16:04:27 +0200
> > >Todor Belev wrote:
> > >
> > >> Zdravei,
> > >> Iskam da popitam tova oznachava li che ARP tablicata
> > >niama
> > >> da ima avtomatichen update.
> > >> Po skoro mehanizma na skripta ti niama li da byde da
> > >
> > >> chistish pyrvo IP - to i sled tova da go setvash...
> > >> Ako e taka oznachava li che na opredeleno vreme trebe
> > >da go
> > >> puskash tozi script(cronjob naprimer).
> > >
> > >Hm... ami da, nali tova bjah napisal v postinga: `arp
> > >-d IP_ADDRESS` za da razkarash entry-to za tozi IP v
> > >ARP tablicata i `arp -s IP_ADDRESS MAC_ADDRESS` za da
> > >go zakovesh kum daden MAC address. Za auto update na
> > >arp table - da i ne. Tezi koito setnesh tvurdo taka
> > >shte si stojat, a za koito ne si ukazval izrichno -
> > >shte si se update-vat (ako sum razbral pravilno kakvo
> > >pitash). Opredelenoto vreme pri nas e pri startup na
> > >mashinata, v edin rc script si gi setvame. Userite ni
> > >ne se promenjat s koj znae kakva dinamika, napravo s
> > >nikakva daze.
> > >
> > >> Ima li nachin na ARP-to da byde zabraneno
> > >avtomatichnoto
> > >> dobaviane na zapisi tam.
> > >
> > >Kude e "tam"?
> > >
> > >Take care
> > >
> > >Boris Jordanov (borj) <borj@xxxxxxxxx>
> > >ICQ 10751645
> > >
> > >PGP-key-fingerprint:------------------------------
> > >CB23 8B52 5FBC F36A 1B61  F1ED 2831 E52D AAFF 7B08
> > >--------------------------------------------------
> > >Public-key:---------------------------------------
> > >http://borj.freeshell.org/borj.asc
> > >--------------------------------------------------
> > >If one does not know to which port is sailing,
> > >no wind is favorable.
> > >
> > -----------------------------------
> > Èçáåðè çàâåäåíèå è íàïðàâè ðåçåðâàöèÿ òóê:
http://app.netinfo.bg/zavedenia/
> >
> >
> >
> >
> >
===========================================================================
> > A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> > http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara
Zagora
> >
>
>
===========================================================================
> A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
> http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara
Zagora

===========================================================================
A mail-list of Linux Users Group - Bulgaria (bulgarian linuxers)
http://www.linux-bulgaria.org/ Hosted by Internet Group Ltd. - Stara Zagora