D-Link Forums

The Graveyard - Products No Longer Supported => Routers / COVR => DGL-4500 => Topic started by: koshia on February 28, 2010, 01:06:15 AM

Title: Suggestion: Wireless Mac Address Filtering
Post by: koshia on February 28, 2010, 01:06:15 AM
Had an issue with Mac filtering before and I just realize that all devices that needs internet whether wifi or landline needed to be part of the "allowed" list in order to access...  Can the router be recoded to only do wireless mac filter instead?
Title: Re: Suggestion: Wireless Mac Address Filtering
Post by: HankRiker on February 28, 2010, 07:04:24 AM
Had an issue with Mac filtering before and I just realize that all devices that needs internet whether wifi or landline needed to be part of the "allowed" list in order to access...  Can the router be recoded to only do wireless mac filter instead?

I thought it did, but I just checked and I don't see a toggle, so apparently it does not.

I'm wondering: Are you thinking of using the MAC address filter for security? If so? Don't.

It's trivial to detect and spoof wireless MAC ID's.

I suggest using WPA2-PSK or at least WPA-PSK-AES for network security.

If you're not using it for security, then sorry about that.
Title: Re: Suggestion: Wireless Mac Address Filtering
Post by: koshia on March 02, 2010, 08:33:41 PM
Yes I was using it for security.  I thought this method was close to impossible to hack?  In any case, I would use WPA2, but some devices like my PDA / phone won't accept the WPA2 settings for some reason.
Title: Re: Suggestion: Wireless Mac Address Filtering
Post by: HankRiker on March 03, 2010, 12:39:20 AM
Yes I was using it for security.  I thought this method was close to impossible to hack?  In any case, I would use WPA2, but some devices like my PDA / phone won't accept the WPA2 settings for some reason.

No, sadly, MAC address filtering is trivial to hack, and not real security. A good percentage of WiFi devices on the market are MAC address programmable. As is the DGL-4500. It allows you to change the MAC address of device to match the MAC address of the PC if your ISP requires that, or you can just change it to eliminate conflicts in a network.

Some older devices aren't capable of supporting the higher demands made by WPA2. There is a less secure form of WPA, which uses TKIP instead of AES. I don't recommend using it, as theoretical attacks have already been shown to work against it to limited success, but it's certainly better than WEP. WEP is so broken that an attacker only needs a few minutes at most using the most aggressive hacking software to recover your WEP key/s and then it's game over.

Hope this helps,
Hank
Title: Re: Suggestion: Wireless Mac Address Filtering
Post by: philwoz98 on March 03, 2010, 10:29:06 AM
Agreed^. I was able to hack my wep in about five minuates once I had backtrack and a wifi card that works. It was strictly testing purposes, ever sense then I won't go back wep.