Re: Securing an OpenBSD AP (or bridge, dunno)

2006-01-15 Thread Bruno Carnazzi
You're right, MAC@ is easy spoofable. I've found this and it looks to be what I want : http://software.newsforge.com/print.pl?sid=05/11/21/175249 It combines L3 isolation before authentication, L2 advantages (same LAN) after authentication (L2 OpenVPN tunnel + bridge with wired LAN), and a good le

Re: Securing an OpenBSD AP (or bridge, dunno)

2006-01-15 Thread Jonathan Gray
On Sun, Jan 15, 2006 at 12:10:13PM +0400, Bruno Carnazzi wrote: >Hi all, > > I use an OpenBSD/i386 3.8 as a gateway for routing my residential ADSL > access. I'm going to use an USB dongle (this is my last externel port > available :( to provide some Wifi access for some laptops (mainly my > P

Securing an OpenBSD AP (or bridge, dunno)

2006-01-15 Thread Bruno Carnazzi
Hi all, I use an OpenBSD/i386 3.8 as a gateway for routing my residential ADSL access. I'm going to use an USB dongle (this is my last externel port available :( to provide some Wifi access for some laptops (mainly my Powerbook). I'd like it to be secured enough. So, here's some question about