MAC address filtering in wireless networks is not "safe ". In fact, it does not require much perseverance to cheat a MAC address. This article will show you how to achieve this goal.
This does not mean that MAC filtering is useless. Its resource consumption is almost negligible, even if it cannot prevent knowledgeable attackers from attacking the system and obtaining access permissions in a short time, it can indeed prevent some automated attackers from attacking weak network security links by taking chances. These weaknesses constitute an important part of wireless access points. MAC filtering can block hackers who attack wireless networks by luck. This may be called a valuable method.
However, it is really not a good idea not to rely solely on MAC filtering. Someone may think like this: "Of course a resolute attack can conquer it, but not everyone can ." In fact, it does not require much perseverance to cheat a MAC address. This article will show you how to achieve this goal.
1. "Listen" for network communication. Find the MAC address. This can be done through a large number of security tools. Recommended network listener (http://www.heibai.net/download/Soft/Soft_21449.htm)
2. Change your MAC address.
For more general MAC address spoofing, you can use the default tool installed in most operating systems to reset your MAC address. The following are examples:
Linux: the spoofing method is ifconfig eth0 hw ether 03: a0: 04: d3: 00: 11.
FreeBSD: the spoofing method is ifconfig bge0 link 03: a0: 04: d3: 00: 11.
Windows: on Microsoft Windows, the MAC address is stored in a primary key of the Registry. The location of this primary key varies with the version of Windows. Of course, there are many utilities that can change the MAC address for users, such as Macshift on Windows XP platform.
Of course, all these technologies can be automated by "self-spreading" malware. To some extent, some malware can automatically generate new malware. Therefore, MAC filtering cannot provide real security.