Posted by Gordon Burditt on 10/12/05 22:04

>>> MAC address of your clients, or the machine you're running on?
>>>
>>> If you're talking about clients, then that's impossible unless they're
>>> running on the same local network as the server (i.e. connected to the
>>> same router, in which case you can use command-line "arp -a xx.xx.xx.xx"
>>> in Win, or some equivalent in *nix).
>>>
>>>
>>>
>>>
>>> --
>>> Oli
>
>MAC addresses can be faked

Yes, but except on wireless networks, it's usually not worth the
effort to try and fake one, because the mac address is only seen
by the local network. Even on wireless networks it only applies
to setups that have tried to lock access to a list of authorized
clients, and those systems probably are using WEP or WPA also.

Faking a MAC address can be as easy as (on FreeBSD):

ifconfig fxp0 ether 01:23:45:67:89:ab

It's also easy on Linux (but the syntax may vary a bit), and Windows
XP has a GUI blank to fill in to change it. The UNIX commands
aren't permanent: you have to run them on each boot, so you stick
them in a startup command script. The XP GUI arranges that the
setup is changed every boot.


Gordon L. Burditt

[Back to original message]