Hi everybody... I''m using the maclist configuration and works really fine. But I''m having a problem. One client of my ISP is using a program that creates a fake mac address, so he can use another IP to get a higher speed to connect to the Internet. Is it possible to block the access by the hostname of his machine ? Does anyone have a better idea? Thanks ! Danilo Haliz. --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.525 / Virus Database: 322 - Release Date: 09/10/2003
Hi Danilo On Tue, 28 Oct 2003 08:27:05 -0200, Danilo Haliz <danilohaliz@itajuba.com.br> wrote:> Is it possible to block the access by the hostname of his machine ? Does > anyone have a better idea?I don''t have a better idea, but if he''s worked out how to spoof his MAC address, then I doubt he''s going to have any trouble changing his hostname. I think you need a new approach altogether. regards Julian -- jcatljchurchdotcodotuk www.ljchurch.co.uk
Thanks Julian... I was thinking about filter by hostname because maybe nobody will think is this ?too simple filter?.> Hi Danilo > > On Tue, 28 Oct 2003 08:27:05 -0200, Danilo Haliz > <danilohaliz@itajuba.com.br> wrote: > > > Is it possible to block the access by the hostname of his machine ? Does > > anyone have a better idea? > > I don''t have a better idea, but if he''s worked out how to spoof his MAC > address, then I doubt he''s going to have any trouble changing his > hostname. I think you need a new approach altogether. > > regards > > Julian > -- > jcatljchurchdotcodotuk > www.ljchurch.co.uk > _______________________________________________ > Shorewall-users mailing list > Post: Shorewall-users@lists.shorewall.net > Subscribe/Unsubscribe: https://lists.shorewall.net/mailman/listinfo/shorewall-users > Support: http://www.shorewall.net/support.htm > FAQ: http://www.shorewall.net/FAQ.htm >__________________________________________________________________________ Acabe com aquelas janelinhas que pulam na sua tela. AntiPop-up UOL - ? gr?tis! http://antipopup.uol.com.br/
On Tue, 2003-10-28 at 05:30, danilohaliz wrote:> Thanks Julian... > > I was thinking about filter by > hostname because maybe nobody will > think is this ?too simple filter?.I guess by hostname, you mean the NETBIOS name of the system. That name -Tom -- Tom Eastep \ Nothing is foolproof to a sufficiently talented fool Shoreline, \ http://shorewall.net Washington USA \ teastep@shorewall.net
At 04:27 10/28/2003, you wrote:>Hi everybody... > >I''m using the maclist configuration and works really fine. But I''m having >a problem. One client of my ISP is using a program that creates a fake mac >address, so he can use another IP to get a higher speed to connect to the >Internet. > >Is it possible to block the access by the hostname of his machine ? Does >anyone have a better idea?The hostname idea is _not_ good. He will figure out that you''re using it and change the hostname... security by obscurity is never a good idea. Personally, I would document that he is doing this, then cut him off or fine him for violating my Terms of Service and the price/package he bought from me. He is stealing, pure and simple... and I don''t tolerate thieves or try to contain them, I blow them the hell out of the water. -- Rodolfo J. Paiz rpaiz@simpaticus.com