Text 22184, 79 rader
Skriven 2006-10-08 14:42:00 av JEAN PARROT (1:123/140)
     Kommentar till en text av ROBERT FOWLER
Ärende: IP addy.
================
    Hello Robert, nice talking to you !  

 JP>         That would teach her to go to a loaner Mac. ;-) Her IP is also
 JP>    mine, no ?

 RF> No, her IP is unique to her machine, just as the IPs of each machine
 RF> are.  These IPs are either assigned by the DHCP server or done
 RF> manually.

        My bad, it sounded wrong when I typed it and I U/L'd it too
   fast, I meant MAC ADDRESS. Does this now read better ? But you got
   it right as far as explaining my bad. The MAC is hardware related.

 RF> The reason that one uses a "trusted zone" in the firewall with DHCP
 RF> enabled is that should a lease expire, and the IP be replaced with
 RF> a different IP, there is no need to address the firewall permission
 RF> issues that arise with the new IP.

        I have never seen a different IP on my LAN and my son's LAN
   that we are using now. His uses a Mac AP and the IP is quite
   different from my IP back home.

 RF> It also follows then, that should one wish to limit firewall
 RF> permissions to a certain group of IPs, he would probably disable DHCP
 RF> and manually assign all of the IPs.  I recall you mentioning that you
 RF> had restricted the firewall permissions to (perhaps) the active IPs
 RF> only, but don't recall you ever mentioning disabling DHCP.

        No, I did not touch the DHCP, it is still going, seems by your
   saying that it is useless and I should disable it. More RTFM to do.

 RF> The disabling of DHCP and the manual assignment results in permanent
 RF> IPs.  These are associated with the MAC addresses of the hardware to
 RF> which they are assigned.

        Hey, I agree.

 RF> When one spoofs the MAC address, he is in essence spoofing the
 RF> hardware. In your wireless setup, this would first validate him to
 RF> connect with your AP, and then the network would recognize him as your
 RF> wife's loaner MAC.  It would provide him the IP she has assigned to
 RF> her, providing it was not being used at the time.

        I have just spent 5 minutes rereading this paragraph. How can
   a spoofer get inside of the router firewall ? Is this not the only
   IP seen from outside ? ( see how mixed up I am ? )

 RF> You should also know that when you wife connects to your neighbor's
 RF> network, she's providing him the information about her machine that
 RF> he could use to connect to your network.  Her MAC address will be
 RF> listed on his AP's associated station list.

        I do not worry too much about being attacked here, houses are
   far enoug apart and I am also far enough from the street. This
   Linksys neighbour is not very clewed up on WiFi, I mentioned to him
   once that we were reading his AP and he was totally surprised of
   the fact even when I told him that his complete setup was on
   default. At least, I have changed the name of mine and use "let"
   for the required MAC only.

 RF> You can't say now that you haven't been properly warned. :-)

        Robert, if you do not give up, I will not either. I know the
   dangers of being "spied", our integrity is not that important but
   the fact that it is possible to loose it should be enough. I will
   look into encryption again. I tried it before and it slowed down my
   access to the outside world. Alan Z. had said that it should not but I
   saw it so. What do you think ?

        Thanks a mega for your patience.
     
       
   We had about 1/2" of frost on the cars
            this morning. It melted fast enough.
 
... Kamouraska is at N47'24.27 W069' 51.44
___ Blue Wave/DOS v2.30
--- Platinum Xpress/Win/WINServer v3.0pr5
 * Origin: Try Our Web Based QWK: DOCSPLACE.ORG (1:123/140)