Re: Changing the mac address on Windows 2000 and XP

From: Alexander Bolante (alexander.bolante_at_gmail.com)
Date: 07/06/05

  • Next message: Mark Teicher: "Re: Network Related Tools" 
    Date: Tue, 5 Jul 2005 22:07:46 -0700
To: Pranav Lal <pranav.lal@gmail.com>

    1) Several 3rd party utilities I've used in the past in a test/dev environmt.
     
     http://www.klcconsulting.net/smac/
     http://www.download.com/a-Mac-Address-Change/3000-2381_4-10325167.html
     
     2) I'm not sure if there are any tools for detecting spoofed MAC
    addresses. But there are tools for simply comparing the MAC addresses
    to an approved list and flagging any unknown ones.

    You should probably think more about DHCP security. Assuming you have
    a considerable tolerance for administrative overhead ;) you can maybe:
     
    a) Use reservations for assigning addresses of critical servers on
    your network (predefined setting that maps a MAC address to an IP
    address so that only a client with a particular MAC address can lease
    the IP address associated with that reservation).
          
    b) Create reservations for each and every client machine on the
    network, and if unreserved IP addresses still remain in the DHCP
    server's scope then these could be reserved using invalid or
    non-existing MAC addresses. Then when a rogue client tries to boot on
    the network the result is that the DHCP server has no free addresses
    to lease and the client can't connect.

    I'm not sure how feasible this is for you, but it could be a start.
    BTW my 13 yr old neighbor says he can find a way to circumvent DHCP
    reservations. Who knows? Bottom line -- just make sure you have
    rigorous security across the board...
     
     Hope that helps. Cheers! 

    -- 
ALEXANDER BOLANTE
Alexander.Bolante@gmail.com 
"I hate quotations. Tell me what you know."
 - Ralph Waldo Emerson 
On 7/5/05, Pranav Lal <pranav.lal@gmail.com> wrote:
> Hi all,
> 
> Is there any way to change the mac address of a LAN card in Windows
> 2000 and Windows XP?
> 
> As a corollary to the question, how would one detect if a computer
> was changing its mac address? This is assuming that the network on
> which this machine is connected has DHCP enabled.
> 
> Pranav
> 
> 
> --
> No virus found in this outgoing message.
> Checked by AVG Anti-Virus.
> Version: 7.0.323 / Virus Database: 267.8.8/37 - Release Date: 7/1/2005
> 
> 
> 
-- 
ALEXANDER BOLANTE
Alexander.Bolante@gmail.com 
"I hate quotations. Tell me what you know."
 - Ralph Waldo Emerson
  • Next message: Mark Teicher: "Re: Network Related Tools"

    Relevant Pages

    • Re: [SLE] Comcast and NAT
      ... > customer that were derived from the MAC address. ... DHCP servers support BOOTP client sematics (that is, here is my MAC address, ... DHCP supports three mechanisms for IP address allocation. ...
      (SuSE)
    • Re: DHCP restriction via MAC...
      ... While DHCP reservations per MAC are generally considered a pain, ... enabling port security to do mac address filtering on your switches. ... or using ipsec in the domain are other ways to increase ...
      (microsoft.public.security)
    • Re: DHCP restriction via MAC...
      ... I would suggest you going for IPsec, mac filtering is not repliable. ... While DHCP reservations per MAC are generally considered a pain, ...
      (microsoft.public.security)
    • Re: Multiple Routers and Segments
      ... That means i will have to setup all 45 domain users MAC ... reservations on DHCP on the 192.168.1.0/24 subnet, and then create a new DHCP ... >Have you considered using MAC / IP reservations? ... >the new subnet that will answer all other incoming request. ...
      (microsoft.public.windows.server.general)
    • Re: Allowing Incoming Connections?
      ... Not sure why you would be running the DNS server on a Mac OS X client ... access for DHCP to work. ...
      (uk.comp.sys.mac)