Orinoco MAC address filtering

[Dominick, David]

if you are using orinoco access points with a radius server, it does add a
little bit because the software addressable MAC will be ignored. Orinoco
cards have 2 MAC addresses, the hardware one, and the software addressable.
You can change the hardware one, but it is not as easy and does add a little
(though MACs are always sent in clear text, so sniffing a valid one is very
easy).

-----Original Message-----
From: Jaakko Isomursu [mailto:jaakko.isomursu at kolumbus.fi]
Sent: Thursday, August 23, 2001 1:02 PM
To: Samba/Wavelan mailing list
Subject: Re: Orinoco MAC address filtering


> > Is there any known way to bypass Orinoco's MAC address filtering for
example
> > by duplicating WLAN-cards MAC address?
>
> Yes, sniff network, collect MAC addresses, set in the driver.

The problem was, I didn't know that changing the MAC address was that easy
in linux..

> > When WEP is allmost useless, would this provide some security?
>
> If you want security :
>
http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Wireless.html#security
>
http://www.hpl.hp.com/personal/Jean_Tourrilhes/Linux/Linux.Wireless.usage.ht
ml#deploy

Yes.. I'm plannng to use VPN, but I was wondering if this MAC address
filtering is worth the trouble. Apparently not.


--
Jaakko Isomursu
jaakko.isomursu at kolumbus.fi