From mboxrd@z Thu Jan 1 00:00:00 1970 Received: from lists.gentoo.org ([140.105.134.102] helo=robin.gentoo.org) by nuthatch.gentoo.org with esmtp (Exim 4.60) (envelope-from ) id 1FyQ4V-0000Fd-Au for garchives@archives.gentoo.org; Thu, 06 Jul 2006 09:22:55 +0000 Received: from robin.gentoo.org (localhost [127.0.0.1]) by robin.gentoo.org (8.13.7/8.13.6) with SMTP id k669LDc8031275; Thu, 6 Jul 2006 09:21:13 GMT Received: from gateway3.delphi.com (gateway3.delphi.com [69.220.142.15]) by robin.gentoo.org (8.13.7/8.13.6) with ESMTP id k669DaGG019253 for ; Thu, 6 Jul 2006 09:13:37 GMT Received: from USINKOK-MX04.NorthAmerica.DelphiAuto.net ([144.250.174.203]) by gateway3.delphi.com (MOS 3.8.0-FCS) with ESMTP id EBP25726; Thu, 6 Jul 2006 05:13:35 -0400 (EDT) Received: from USINKOK-MX01.NorthAmerica.DelphiAuto.net ([144.250.174.199]) by USINKOK-MX04.NorthAmerica.DelphiAuto.net with InterScan Messaging Security Suite; Thu, 06 Jul 2006 05:13:34 -0400 Received: from [10.233.7.145] ([10.233.7.145]) by USINKOK-MX01.NorthAmerica.DelphiAuto.net with Microsoft SMTPSVC(5.0.2195.6713); Thu, 6 Jul 2006 05:13:34 -0400 Message-ID: <44ACD40C.6000109@mid.message-center.info> Date: Thu, 06 Jul 2006 11:12:44 +0200 From: Alexander Skwar User-Agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.7.12) Gecko/20060104 Thunderbird/1.0.7 Mnenhy/0.6.0.104 Precedence: bulk List-Post: List-Help: List-Unsubscribe: List-Subscribe: List-Id: Gentoo Linux mail X-BeenThere: gentoo-user@gentoo.org Reply-to: gentoo-user@lists.gentoo.org MIME-Version: 1.0 To: gentoo-user@lists.gentoo.org Subject: Re: [gentoo-user] Protecting my server against an individual References: <49bf44f10607041556w3db1b64et625c088ba8c56541@mail.gmail.com> <44AB1C8E.4090903@gmail.com> <44AB6C6A.9040008@mid.message-center.info> <44ABEB65.6080200@gmail.com> <44ACA9A6.40100@mid.email-server.info> In-Reply-To: Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit X-OriginalArrivalTime: 06 Jul 2006 09:13:34.0459 (UTC) FILETIME=[751AFCB0:01C6A0DC] X-Archives-Salt: 756f89c0-7453-4ce1-95f5-5bacf43849d6 X-Archives-Hash: eb49344f22729d8cfe4baea9f3505d67 Lord Sauron wrote: > On 7/5/06, Alexander Skwar wrote: >> Lord Sauron wrote: >> How should *THAT* help? In 99.9999999999999999999999999999999% of >> the times, the attacker won't be on the same subnet, and thus the >> MAC isn't available. > > Couldn't hurt. Well, as it doesn't buy you anything, I'd disagree: It would hurt. It would make the setup more complex with no gain. > You never know what you'll find when you tear apart > some networking packets. You won't find the MAC adress of the attacker. You'll find the MAC adress of your upstream router/switch. >> You can try to block me, my MAC will be either 00:12:17:D4:21:D4 >> or 00:12:17:D4:21:D2. Just tell me, where you blocked me using >> my MAC and I'll see if I can still access. > > I'll try it someday when I can figure out enough about linux > networking to do something like that. Don't spend too much time, as it's a waste. You will NOT see my MAC address. Not because I try to disguise it, but because it won't be available to you. That's simply how TCP/IP works. Alexander Skwar -- The more laws and order are made prominent, the more thieves and robbers there will be. -- Lao Tsu -- gentoo-user@gentoo.org mailing list