Hackers!

[paulm]

Hi anone else haveing huge problems with hackers? we have a small but determind number of idiots who wast our time with constant attcke son our system from arp poisoning to packet floods and on and on! any idears (other than a baseball bat round the ears!) would be most helpful.

[remcdoug]

Hi Paul, why don't you blacklist their MAC adress? If they're smart enough they should be able to spoof their MAC, but it's still worth a shot?

[paulm]

Thanks for the thought. we have mac addresses blocked all over the place some which are blocked on every access point some only no a small number we are still working on a solution but we have now been hit with an attack that at present we can find no known solution for on an open network apart from spending huge amounts of money on so say professional ap's

there are some many attacks and stunts that can be used on networks but i am reluctant to talk about them on an open forum and this is the only way that patronsoft want to talk. but there are many improvements that i would like to see.

[remcdoug]

Sorry to hear about all the security issues you are having.

In additional to using the built-in MAC-blacklisting that the firstspot software has, you could "chain" a proxy server directly to the outside interface of your firstspot portal machine.

That way, all traffic going thru the portal goes thru the proxy server, which you can then harden/lock down the security above and beyond what is built-in to the portal.

Hope that thelps!

[paulm]

Hi thanks again i will look into the proxie route the other issue that we have is that we use ip based session handling so firstspot does not record the mac addresses in the user log thanks again for your help