Text 22195, 92 rader
Skriven 2006-10-08 15:53:00 av ROBERT FOWLER (1:123/140)
     Kommentar till en text av JEAN PARROT
Ärende: Re: IP addy.
====================
-=> JEAN PARROT wrote to ROBERT FOWLER <=-

 JP>         That would teach her to go to a loaner Mac. ;-) Her IP is also
 JP>    mine, no ?

 RF> No, her IP is unique to her machine, just as the IPs of each machine
 RF> are.  These IPs are either assigned by the DHCP server or done
 RF> manually.

 JP>         My bad, it sounded wrong when I typed it and I U/L'd it too
 JP>    fast, I meant MAC ADDRESS. Does this now read better ? But you got
 JP>    it right as far as explaining my bad. The MAC is hardware related.

 Nope, your still confused.  I'm not talking about the IP that is assigned
 by your ISP ("her's is the same as mine").  I'm talking about the IPs
 that your network DHCP server (router) provides to each machine connected
 to it.  Those have the format of 192.168.2.XXX, typically.  Each of these
 IPs is associated with the MAC address of the hardware (machine's NIC,
 etc.) to which it is assigned.

 RF> The reason that one uses a "trusted zone" in the firewall with DHCP
 RF> enabled is that should a lease expire, and the IP be replaced with
 RF> a different IP, there is no need to address the firewall permission
 RF> issues that arise with the new IP.

 JP>         I have never seen a different IP on my LAN and my son's LAN
 JP>    that we are using now. His uses a Mac AP and the IP is quite
 JP>    different from my IP back home.

 Again, you're talking about the IP your ISP assigns.  That's irrelevant
 to this discusssion.

 RF> It also follows then, that should one wish to limit firewall
 RF> permissions to a certain group of IPs, he would probably disable DHCP
 RF> and manually assign all of the IPs.  I recall you mentioning that you
 RF> had restricted the firewall permissions to (perhaps) the active IPs
 RF> only, but don't recall you ever mentioning disabling DHCP.

 JP>         No, I did not touch the DHCP, it is still going, seems by your
 JP>    saying that it is useless and I should disable it. More RTFM to do.

 Not useless, as it's still active.  The DHCP server, when enabled, supplies
 IPs to any requesting connected machine.  It also maintains leases on
 those IPs, leases which expire.  When they do, the DHCP server issues
 another lease, but not necessarily the same IP.

 If you wish to (manually) assign permanent IPs and to have none other
 issued, then you should disable DHCP.

 -------------------------------cut----------------------------------

 RF> When one spoofs the MAC address, he is in essence spoofing the
 RF> hardware. In your wireless setup, this would first validate him to
 RF> connect with your AP, and then the network would recognize him as your
 RF> wife's loaner MAC.  It would provide him the IP she has assigned to
 RF> her, providing it was not being used at the time.

 JP>         I have just spent 5 minutes rereading this paragraph. How can
 JP>    a spoofer get inside of the router firewall ? Is this not the only
 JP>    IP seen from outside ? ( see how mixed up I am ? )

 Again, we're talking about the machine's IP.  When the hacker spoofs the
 MAC address and connects to your router's wireless device, it's just
 the same as if he had connected physically with a CAT5 cable to your
 network (router).  That's the first step.

 The second is that he must get an IP.  If DHCP is enabled, the server
 (router) will provide him one.  Lastly, he must get by the firewall
 permissions.

 ---------------------------------cut--------------------------------

 JP>         Robert, if you do not give up, I will not either. I know the
 JP>    dangers of being "spied", our integrity is not that important but
 JP>    the fact that it is possible to loose it should be enough. I will
 JP>    look into encryption again. I tried it before and it slowed down my
 JP>    access to the outside world. Alan Z. had said that it should not but
 JP> I
 JP>    saw it so. What do you think ?

 A theoretical loss is performance is expected, but under normal
 circumstances it should be minimal, if not altogether unappreciated.
 A significant loss points to other factors.

 Regards,

 Robert Fowler


... MultiMail, the new multi-platform, multi-format offline reader!
--- MultiMail/Win32 v0.43
 * Origin: Try Our Web Based QWK: DOCSPLACE.ORG (1:123/140)