Re: ssh security question

2001-08-26 Thread dman
On Sun, Aug 26, 2001 at 11:29:57PM +0200, Martin F Krafft wrote: | also sprach dman (on Sun, 26 Aug 2001 05:06:37PM -0400): | > The MAC address is only known along that particular wire. That is, if | > the IP packets pass through any routers or gateways the receiving side | > will see the MAC addr

Re: ssh security question

2001-08-26 Thread Jakob B. Jensen
On Sun, Aug 26, 2001 at 10:11:08PM +0200, Martin F Krafft wrote: > my laptop has two net interfaces, one wired and one wireless. they > have different MAC addresses, but i configured my DHCP server to treat > them the same so that i usually have the same IP no matter what card i > use. > > i just

Re: ssh security question

2001-08-26 Thread Martin F Krafft
also sprach dman (on Sun, 26 Aug 2001 05:06:37PM -0400): > The MAC address is only known along that particular wire. That is, if > the IP packets pass through any routers or gateways the receiving side > will see the MAC address of the last gateway/router interface and not > the MAC of the sender.

Re: ssh security question

2001-08-26 Thread dman
On Sun, Aug 26, 2001 at 10:11:08PM +0200, Martin F Krafft wrote: | shouldn't sshd at least worry about the MAC address too (can it?) just | an IP is too easy to spoof (MAC are too i guess). The MAC address is only known along that particular wire. That is, if the IP packets pass through any rout

Re: ssh security question

2001-08-26 Thread Jeremy T. Bouse
I think in this case this was only able to succeed becuase you were actually in control of that session... Had it been someone else spoofing they would also have to already obtain the session keys being used... Jeremy On Sun, Aug 26, 2001 at 10:11:08PM +0200, Martin F Krafft wrot

ssh security question

2001-08-26 Thread Martin F Krafft
my laptop has two net interfaces, one wired and one wireless. they have different MAC addresses, but i configured my DHCP server to treat them the same so that i usually have the same IP no matter what card i use. i just noticed a curious bit of possible security awkwardness. with my wired card, i